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DELIA TO CHANGE 
CORE TECHNOLOGY 


Mainframe-to- Unix move aimed at 
extending ability to compete online 


BY MICHAEL MEEHAN 


| Uncoupling much of its busi- 
| ness from the legacy systems 
| that helped take it aloft, Delta | 


CHICK RAMSAY, an executive at Autobytel.com, says he’s learned you 
shouldn't try to bypass the powerful auto dealer establishment. 


Air Lines Inc. is migrating its | 
internal fare-searching and | 
ticket-pricing functions over 
to Web-friendly software. 

The move comes as the air- 
line industry scrambles to up- 
date its IT systems to handle | 
the competitive pres- 
sures created by the 


| Internet. 


Vince Caminiti, the 
vice president of e- 


| commerce at Atlanta- 


WARS, 


Feeling threatened by e-commerce, 
the nation’s car dealers, record stores, 
wine wholesalers and other economic 
middlemen have been battling to protect 
their positions and erect legal barriers to | 
Web-based competitors. But suddenly, 
there are signs of a wary cease-fire be- 
tween the off-line and online worlds. 
Story is on page 17. 
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| booking 
| help the airline calcu- 


BUSH MAKES KEY PRIVACY DECISIONS 


BY PATRICK THIBODEAU 
| WASHINGTON 


based Delta, said he 
expects the new 
engine to 


Administration won't 
appoint privacy czar 


Chief privacy officers are be- 
coming increasingly common- | 


| place in U.S. corporations, and | 
| many 

have people and agen- 
| cies in place to oversee 
| privacy issues. But the 


foreign nations 


| Bush administration 
confirmed last week that it has | 


| no plans to fill a privacy czar | 
| position. 


“Internationally, | America 

| looks like a dinosaur without a | 
privacy agency or a chief pri- 
vacy officer,” said Chris Hoof- 
nagle, staff counsel at the Elec- 
Privacy Information 


Center in Washington. Hoof- 


Privacy, page 14 


CAMINITI: “We 
need to do this.” 


aA 
Ta 


| Services 


late lower fares and handle the 
increasing amount of business 
transacted over the Internet 
The new booking engine was 
developed by ITA Software 
Inc. in Cambridge, Mass. 

“We need to do this to take 
full advantage of the Web as a 
distribution channel,” Caminiti 
said. 

Delta’s in-house booking en- 
gine, called Deltamat- 
ic, was built in the late 
1960s and was de- 
signed to pump orders 
through a 
tion-processing facil- 
ity mainframe. In Sep- 
tember, the airline 
signed a deal for an 
undisclosed amount 


transac- 


HIPAA rules go into 
effect without changes 


| BY JULEKHA DASH 
| AND PATRICK THIBODEAU 


The Bush administration last 
week reversed course and de- 
cided not to oppose enactment 


of a controversial set of 


medical data privacy 
rules — at least for now. 

Under pressure from 
President George W. 
Bush to protect the privacy of 
patients, Health and Human 
Secretary Tommy 
Thompson last week an- 
nounced that he wouldn’t de- 
lay the April 14 introduction of 


the new privacy rules mandat- | 


ed by the federal Health Insur- 
ance Portability and Account- 


ability Act. But Thompson said | 
HIPAA, page 77 


to put ITA’s pricing and reser 
vations software on a farm of 
Hewlett-Packard Co. Unix 
servers, which will allow the 
TPF mainframe to focus on 
transactions. The system is 
currently under construction; 
Delta didn’t reveal when it will 

become operational. 
ITA had earlier supplied the 
booking engine for the soon- 
Delta, page 14 


USERS SHARE 
STORAGE ADVICE 


Say building SAN 
architecture is tough 


BY LUCAS MEARIAN 


Storage networking technolo- 
gy is being pitched as the res- 
cue vehicle for companies in 
buried under 
But ex- 


danger of being 
an avalanche of data. 
perienced warned at 
a Computerworld-sponsored 
conference here last week that 
building a networked storage 
architecture rum- 
bling in its own right. 

Before area net- 
work architecture can be built 
to handle all of a company’s 
data, existing IT 
have to be accounted for in 
order to provide an 
starting noted 
Arbona, a consulting project 
leader at The Goldman Sachs 
Group Inc. in New York. “If 
you can’t measure a process, 
you can’t manage it,” he said. 

To help cope with the 
doubling of its data annually, 
Goldman Sachs is considering 
a move away from locally 
attached storage into a net- 
worked setup supporting dy- 
namic volume distribution, 

Storage, page 16 
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WE DIDN'T JUST JUMP ON THE 
INFRASTRUCTURE BANDWAGON. 


WE BUILT IT. 


It’s time to set the record straight. Long before our competitors even added the word “infrastructure” 
to their vocabulary, we were busy creating it. Since we first launched Unicenter; it has become the 
de facto global standard for managing eBusiness infrastructure. But we didn’t stop there—we’re 
also the world leader in security and storage software. Every day, our software handles over 180 
million transactions, protects $50 billion in wire transfers and stores 40 million security exchanges. 
Expertise doesn’t happen overnight. It’s taken 25 years of hard work and leadership to get to 
be the best. So when we say you can trust every one of our 18,000 employees around the world 


to deliver the software and service that your eBusiness’ success depends on, we really mean it. 
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ARE THAT MANAGES « 


NEWS 


6 THERISKS OF beta testing 
hit home at Xerox as an in- 
compatibility between a Cisco 
switch and a beta version of 
Microsoft’s Windows XP shuts 
down Xerox’s network. 


THE IRS UPGRADES its call 
center applications in time for 
this year’s tax rush. 


GROOVE NETWORKS «re- 
leases its peer-to-peer collabo- 
rative software and already has 
customers signed on. 


ARISE IN OUTSOURCING 


in order to cut costs could be 
one result of a cooling econo- 
my, say analysts. 


BOOKSELLER BORDERS 


outsources its online operation 
to Amazon.com, which will 
relaunch Borders.com as a 
co-branded site. 


FIREWALL TECHNOLOGY 


moves to network interface 
cards in a new initiative from 
3Com and Secure Computing. 


DENIAL-OF-SERVICE 
attacks are the target of new 
tools from several vendors, 
but how well do they work? 


UPGRADED SECURITY 
will be featured in upcoming 
versions of Windows, says 
Microsoft. 


Editorial/Letters. ...... 24,25 
How to Contact CW 

Shark Tank 

Company Index .......... 76 





OOF TWARE 


LINGUIST 


When Lou Coglianese talks 


about his job as a senior 


software architect, he uses 


terms a linguist would appre- 
ciate. But it’s no surprise, 
considering his background 
in French language and liter- 
ature, which helps him “ex- 
press things in different 


ways.” Page 66 


APRIL 


BUSINESS 


34 MANAGEMENT CUTS are 
forcing some laid-off IT work- 
ers to settle for lower-level, 
lower-paying positions. 
WORKSTYLES 
H&R BLOCK’S Ir staffers 
have been on tax-season over- 
drive since December, but 
come Tuesday, they’ll finally 
get some rest. 


E-COMMERCE FUNDING 
may be tough to come by as 
companies tighten their belts, 
but with the right sell to senior 
management, it’s not impossible. 


VENTURE CAPITALISTS 
get tough, demanding that 
companies offer them solid 
investments in real products. 


SHARED SERVICES prove 
to be a challenge for IT depart- 
ments to manage and market. 


TECHNICAL SKILLS are as 
critical as management skiils in 
landing a job as a professional 
services senior manager today, 
says our Career Adviser. 


OPINIONS 


24 PATRICIA KEEFE says priva- 


cy legislation will help bolster 
relationships with your custo- 
mers in the coming years. 


PIMM FOX explains why it’s 
important for IT professionals 
to keep an eye on Wall Street. 


JOHN GANTZ writes about 


an easy-to-miss revolution go- 
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CLEAR THAT CUBE 


Keeping all your PCs physically in the data center 
and giving users only a monitor, keyboard and mouse 


can offer some real advantages. A small company in 
Texas has developed a way to do it. Page 56 
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TECHNOLOGY 


52 BEATLES.COM can offer 
lessons to developers at main- 
stream firms that want to push 
their sites beyond HTML and 
simple graphics. 

SECURITY JOURNAL 


VIRUSES CONTINUE to 
creep into his network, despite 
security manager Vince Tues- 
day’s best efforts. He’s asking 
readers for advice on how to 
stop them. 


LOCATION SERVICES wii! 


be the next new way to find 
customers, but the technolo- 
gy’s future is clouded by FCC 
rules, privacy concerns and 
other issues. 


BUILT-IN WEAKNESSES 
in IP itself sometimes allow 
hackers to shut down parts 

of the Internet. But there are 
ways to patch the cracks. 
QUICKSTUDY 
INTRUSION-DETECTION 
systems let you know if some- 
one is trespassing in your net- 
work. Find out how it works. 


62 


ing on in the server market. 


ALEX TORRALBAS charges 
that politicians conveniently 
hide behind issues involving 
children when supporting the 
use of intrusive technologies. 


WILLIAM M. ULRICH claims 
that better engagement between 
IT and business should start 
with IT encouraging senior 
business executives to work 

as part of a team. 


| 
| 
| 


| 
| 
| 
| 
| 
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ONLINE 


In the Security Community, West 
Coast bureau chief Pimm Fox checks 
in from the RSA Conference 2001 
www.computerworld.comAecurity 

and offers his take on the fall of 
Kozmo Inc. in Computerworld’s 
E-Commerce Community. 
www.computerworld.com 
ecommerce 
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\ recent security breach at the IRS 
reveals that the most pressing issue 
Congress should tackle is security, 
not privacy, writes community mem- 
ber Daniel Burton, who is also senior 
vice president of government affairs 
at Entrust Technologies Inc. 
www.computerworld.comAecurity 


36 PETER G.W. KEEN writes 


that IT organizations must 
embrace PDAs and not repeat 
the mistake of being late to 
the PC party in the 1980s. 


FRANK HAYES says that 


instead of resisting the iastal- 
lation of unauthorized beta 
software, you should start a 
program that will allow you 
to control it. 


78 





Calling It Quits 


Raytheon Co. CiO James Infinger is 
leaving the defense contractor to 
pursue other opportunities, the 
company confirmed last week. 
Spokesman David Polk said Infinger 
has told his staff that he would no 
longer be working at the Lexington, 
Mass.-based company. Polk added 
that he didn't know when Infinger’s 
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XP Beta ‘Testers Face 
Incompatibility Issue 


Need for fix revealed when unauthorized 
beta installations cause outages at Xerox 


| BY CAROL SLIWA 


last day would be and said he could- | 


n't make any comments other than 
to confirm that Infinger is leaving. 
Infinger joined Raytheon as C10 in 
October 1997 after holding a similar 
position at Dallas-based technology 
retailer CompUSA Inc. for three 


Citing the turbulent U.S. economy 
and a need to cut costs, Dell Com- 
puter Corp. and Compaq Computer 
Corp. are calling off their customer 
conferences this year. Dell has can- 
celed its annual DirectConnect con- 
ference in Austin, Texas, and Com- 
pag won't hold its biennial Innovate 
Forum in Houston, the companies 
said. Dell has held its DirectConnect 
conference since 1999, and about 
1,200 customers attended last 
year’s event. Compaq’s conference 
traditionally attracts about 4,000 
people and has been held every 
other year since 1993. 


a 


AOL Plans to Change 
Privacy Claims in Ads 
America Online Inc. has agreed to 
change the wording about privacy 
and security in some of its adver- 
tisements. The change came at the 
behest of the National Advertising 
Division (NAD) of the Council of 
Better Business Bureaus Inc., a vol- 
untary advertising industry trade 
and regulatory group in Arlington, 
Va. The NAD requested that AOL 
make changes to its recent televi- 
sion ads, which tout that “on AOL, 
your privacy and security are al- 
ways protected,” said Andrea 
Levine, director of the NAD. The 
NAD was concerned that the ads 
might lead consumers to believe 
that AOL could protect their privacy 
and security on the Internet at 


|; tween 


AND TODD WEISS 
HE RISKS of testing 
beta software hit 
home for Xerox 
Corp. when an in- 
compatibility be- 

a Cisco System Inc. 


| switch and a beta version of 


| Microsoft 


Corp.’s upcoming 


| Windows XP operating system 
caused three network outages 


| indicated that the outages hap- 


in a building at its El Segundo, 
Calif., facility. 
A Xerox e-mail newsletter 


| pened between March 30 and 


April 4, after an unspecified 


number of employees installed 
| a beta version of Windows XP 


in violation of the office equip- 
ment maker’s corporate policy, 


| according to company spokes- 


woman Kara Choquette. 
Xerox prohibits unautho- 


| rized software use. Through 


| the 


routine newsletter, the 
company reminded employees 
not to install unauthorized 


| software on their computers. 


| dressed the problem by taking 


Although the company ad- 


| the Windows XP beta out of its 
| systems, Choquette said the 


| outage was “not an issue with 


| Microsoft software, but with 


equipment from a third-party 
vendor” that she didn’t name. 
Ed Chapman, Cisco’s direc- 


tor of enterprise product mar- 


keting, last week acknowl- 


| edged that an incompatibility 


between its Catalyst 5000 
switch and the XP beta had 


| caused the problem, which has 
| been resolved. Chapman said 





the problem related to “the 


| way the switch and Windows 


XP interacted with each other” 


| with regard to 802.1x security, 


a new feature in the second 


beta of Windows XP. 


When 802.1x is enabled on 
Windows XP, control modules 
on any Catalyst 5000 switches 
older than two years may for- 
ward 802.1x packets to all ports 
on the switch, potentially caus- 
ing network congestion, a Cis- 
co 





spokeswoman said. She | 


characterized the Catalyst 
5000 as a “fairly widely de- 
ployed switch,” although not as 


| popular as the newer Catalyst 


6000 line. 
Chapman said Xerox has 


| been the only company to re- 


port a problem. “There are no 
hardware issues,” Chapman 
said, noting that the problem 
was related to software on the 
switch and that no new hard- 
ware is needed to correct it. 
(For fixes, see box.) 

Je truly view this as a non- 
issue,” Chapman said. “The is- 





sue was found in normal test- 
ing of the product, and I’m glad 
it was found prior to a major 
release of [Windows XP].” 
Cisco, Microsoft and Xerox 
all worked together to solve 


the problem, according to a | 


Microsoft spokesman. “Really, 
this is what the beta process is 
all about,” he said. “This [kind 
of problem] crops up, and so 
we go to fix it.” 

The Microsoft spokesman 
said his company issued a tem- 
porary work-around for beta 
testers and is “evaluating 
whether there is a way to put 
something in the final prod- 
uct” to prevent the Catalyst 
5000 problem. 


“In a beta, you’re always go- | 


IRS Call Center Upgrade Aims 
To Boost Tax-Time Services 


BY MARC L. SONGINI 
After years of ribbing about its 


less-than-friendly service, the | 
| Internal 
| making a major push to im- 

prove customer relations, just | 


Revenue Service is 


in time for this year’s tax sea- 
son rush. 

The IRS, which received 
nearly 110 million phone calls 
last year, has recently complet- 
ed a $2 million upgrade of its 


| vie 
call center applications, allow- 


ing it to handle almost twice as 
many simultaneous calls, said 
Ray Lefebvre, a program direc- 


IRS Overhaul 


The Challenge 

> Nearly 110 million citizens 
contacted the IRS last year 
by telephone. 


>The agency processed 
more than 215 million indi- 
vidual and business returns. 


The Response 

>The IRS upgraded 27 call 
centers that can handle 
1,500 calls to agents or 
automated response sys- 
tems simultaneously, up 
from 800 per call center. 





tor at the agency. The new sys- 
tem is a launching point for 
an integrated customer rela- 


tionship management (CRM) | 
phone, fax, e-mail and Web- | 


based system that the IRS 
plans to phase in during the 


| next several years. 


The IRS probably has the 
most advanced system of any 
U.S. government agency, said 
Esteban Kolsky, an analyst at 
Gartner Inc. in Stamford, Conn. 

“The IRS realizes they do 
have to respond to customers’ 
needs,” he said. ”"They’re not 
the most dynamic organization 
in the world, and if they can do 


| it, then [private companies] 


can do the same.” 

Technology is key in helping 
the IRS trim some of the $125 
billion it costs taxpayers to 
comply with the tax code, said 
Patrick Fleenor, chief econo- 
mist at the Tax Foundation, a 
Washington-based taxpayer ad- 
vocacy group. 

Since 1992, the IRS has oper- 
ated 42 taxpayer call centers 
nationwide that can function 
as if they were connected un- 
der one roof. The system, which 
runs on software from Aspect 
Communications Corp. in San 
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Switching Gears 


Doing one of the following will 
fix the incompatibility of the 
Windows XP beta with Cisco’s 
Catalyst 5000 switch: 

> Downloading a piece of soft- 
ware from Cisco’s Web site 
and installing it on the Cata- 
lyst 5000 switch. 


>Reconfiguring the software in 
the Catalyst 5000 switch. 


> Doing a work-around to alter 
the Windows XP configura- 
tion on PC workstations 
running the beta code. 


ing to have these sorts of prob- 
lems,” said Michael Silver, an 
analyst at Gartner Inc. in Stam- 
ford, Conn. “People put it on 
machines, on production net- 
works, and they don’t realize it 
could cause problems like this.” 
The commercial version of 
Windows XP is due to ship in 
the second half of the year. D 


Jose, identifies callers auto- 
matically and then routes them 
to appropriate agents depend- 
ing on their level of need or 
other variables, said Lefebvre. 

The agency last December 
completed an eight-month roll- 
out of Windows NT-based 
Aspect Call Center 7.2 (an up- 
grade from Version 6.2) run- 
ning on an Oracle Corp. data- 
base. Each call center can now 
handle about 1,500 calls at a 
time, up from 800. 

The IRS is also beta-testing 
an automated voice system 
based on applications from 
Boston-based SpeechWorks In- 
ternational Inc. and plans to go 
live with the system sometime 
this quarter. 

However, Kolsky said, it may 
be a bit premature for the IRS 
to use voice technology for 
anything but simple functions. 
Tax questions become 
very complicated, and users at- 
tempting to resolve problems 
may be frustrated by system 
limitations, he said. 

Such self-service CRM in- 
stallations are becoming more 
common in educational orga- 
nizations and places like the 
US. Postal Service, said Eliza- 
beth Herell, an analyst at Giga 
Information Group Inc. in 
Cambridge, Mass. 

“Government organizations 
are very aware they have to de- 
liver better services but not 
spend more money,” she said. B 


can 
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Collaborative Peer-to-Peer Technology 


Finds Groove at GlaxoSmithKline, Raytheon 


model to initiate and maintain | 


Others are still skeptical about product 
from Groove Networks, but pilots emerge 


BY JENNIFER DISABATINO 
Despite the fact that many IT 
managers and pundits alike are 
skeptical about the usefulness 
of peer-to-peer technologies, a 
few companies such as Glaxo- 
SmithKline PLC and Raytheon 
Corp. have recently decided to 
take the plunge. 

Last week, Groove Networks 
Inc. in Beverly, Mass., released 
the first version of its collabo- 
rative peer-to-peer application, 
Groove 1.0. 

Already, U.K.-based Glaxo- 
SmithKline PLC has snapped 
up 10,000 seats for its world- 
wide employees. Meanwhile, 


Raytheon Co. in Lexington, 
Mass., Abbott Laboratories in 
Abbott Park, Ill., and Syntek 
Technologies Inc. in Arlington, 
Va., have also signed agree- 
ments for limited deployments 
of the new collaborative tool. 

“I think the needle is tilting 
toward the overhype 
right now in terms of Groove,” 
said John Pescatore, an analyst 
at Gartner Inc. in Stamford, 
Conn. However, Pescatore said 
that in the long run, he believes 
Groove will likely prove useful 
enough to business users to be 
profitable. 

Groove uses a peer-to-peer 


cycle 


Groove Attempts to Position Itself 
As Corporate P2P Standard Bearer 


Peer-to-peer is being touted as 
the hot new technology. Whereas 
Napster Inc. in Redwood City, 
Calif., has been something of a 
bastard child, Groove is setting 
itself up as the standard-bearer, 
particularly for corporate use. To 
be viable, however, it’s adopting 
some IT mainstays, like a data 
repository, to lure corporate users. 

Network Services for Groove 
1.0, for example, is designed to 
allow IT managers to centrally 
control the deployment and be- 
havioral characteristics of widely 
dispersed Groove software, ac- 
cording to a press release issued 
with the launch of the software 
last week. Some of those central- 
ized tools include the deployment 
and management of client soft- 
ware and licenses, the dissemina- 
tion of component and tool secu- 
rity policies, the dissemination of 
user identities to be consistent 
with a corporate directory, the dis- 
semination of software version 
upgrade policies and the aggrega- 
tion of software usage, behavior 
and fault information. 

Groove spokesman Richard 
Eckel said the software is also 
working toward storing data on 
central servers. As a partner in 
Microsoft Corp.'s .Net program, 
for example, Groove would access 





line-of-business software. The 
changes users make while in a 
Groove session would then be 
stored on a central server. 

In fact, little of the technology 
now being sold as peer-to-peer is 
exclusively run from desktop to 
desktop, which is the simplest 
peer-to-peer model, according to 
Gartner analyst John Pescatore. 

“There's only really one pure 
peer-to-peer,” he said, “Napster 
has central directory, as does IM.” 
Meanwhile, Gnutella, unlike Nap- 
ster, works without a central 
directory. 

“Today, the pain of using [peer- 
to-peer applications] outweighs 
the gain,” Pescatore said. “It's not 
very efficient from a network point 
of view. It requires companies to 
think through architectural issues, 
putting technology in place for 
discovery capabilities. Groove’s 
putting the things in place to do 
that sort of thing - reliable deliv- 
ery, security, naming services 
[user authentication].” 

“Right now, to use peer-to-peer 
to do that in small, ad hoc groups, 
you sort of have to be a rocket 
scientist,” Pescatore said, adding 
that that’s why many developers 
are building on a hybrid model like 
server-to-server. 

~- Jennifer DiSabatino 


| 
| 
| | 
| 


workspaces, where users ex- | 


change text with instant mes- 
senger (IM) software, applica- 
tions and voice and video in 
real through various 
panes within one frame or skin. 
The data is stored on each 
user’s hard drive. Off-line users 
can download updated infor- 
| mation from ongoing Groove 


time 


sessions when they log on. 


Lingering Skepticism 

One manager of messaging 
systems at a major U.S. bank 
with 65,000 users said he 
doubts that his company would 
deploy Groove. 

“Where’s the backup?” he 
asked. “I see that it’s kind of a 
toy that people will use indi- 
vidually.”. He acknowledged, 
however, that that was how IM 
caught on at the 
Lotus Sametime IM software is 
now an indispensible tool at 
the bank, he said. 

That same type of adoption 
may be the key to Groove’s 


company. | 


success, if Raytheon’s selec- 
tion is any indication. 

“We had several people sign 
up for the [free] preview copy, 
and they have indicated that 
this is a pretty cool technolo- 
gy,” said Saul Fisher, director of 
strategic initiatives at Ray- 
theon. “Right now, all we’re do- 
ing is a pilot. We're testing the 
product to see if it meets the 
functionality claims it makes 
and if it meets the security re- 
quirements so we could use it 
potentially inside and outside 
[the firewall J.” 

GlaxoSmithKline is 
testing Groove to see how it 
works in real, collaborative sit- 
uations. 

Like Fisher, Philip Connolly, 
head of IT communications at 
GlaxoSmithKline, is drawn to 
Groove’s ability to link people 
in disparate geographical loca- 
tions without having to get the 
IT department involved. “Too 
many of us are spending too 
much time on airplanes,” Con- 
nolly said. He added that he 
hopes Groove will help reduce 
the company’s travel expenses. 
“Tt seems to connect people to 
people, whereas Notes seems 
to connect people to docu- 
ments,” he said. 

Both Raytheon and Glaxo- 


also 


SmithKline fairly devout 
Notes shops. Connolly 
Fisher agreed, however, that 


are 
and 
Groove has an edge over the 
collaborative Lotus products 
Sametime and QuickPlace 
when it comes to setting up 
quick workgroups. 

“Groove has the potential to 
be easier to set up,” Fisher said 
“If it’s that easy to use, kind of 
like IM, maybe it’s something 
that we should consider.” D 


Being Groovy 
> Enterprise licensing: 
$49 per user 


>» Groove Enterprise 
Network Services: $8 per 
user per month (volume 
pricing available). 


>» The Groove Preview 
Edition, a subset of the 
full Groove product, is 
free at www.groove.net 


> Pricing for individual 
purchase of Groove 
software and services 
will be announced later 
this year. 


Cost Cutting May Spur IT Outsourcing Deals 


Analysts: Economic downturn may cause 
firms to turn to outsiders to reduce costs 


| BY JULEKHA DASH 
The cooling economy may 
| prompt firms to outsource 


| more IT for cost-cutting rea- | 


| sons, according to analysts. But 


é 
| technology users said 


| sions yet. 
Though an outsourcing deal 
doesn’t automatically guaran- 


| tee cost savings, users will ex- | 


amine their IT budgets more 


| closely and shift their priori- | 


| ties to put cost cutting among 


| the top drivers for any technol- | 


ogy decisions they make, said 


Aberdeen Group Inc. in Boston. 

According to a survey of 150 
American and European com- 
panies released last month by 
The Conference Board Inc. in 
| New York, cost cutting was the 


the | 
| economy hasn’t had much im- | 
| pact on their outsourcing deci- | 


Lew Hollerbach, an analyst at | 


top benefit of outsourcing, cit- 
| ed by 39% of respondents. 
Having access to experts came 
in second among respondents, 
with 38%. 

“In boom times, outsourcing 
tends to be focused on time-to- 
market issues, and in down 
| times focused on cost savings 
| and restructuring,” said Peter 
Bendor-Samuel, CEO of The 
Outsourcing Center Corp., a 
Dallas-based consultancy. 

But David Doney, director of 
| information services at Blue 
Cross/Blue Shield of Michi- 


gan, said the economic down- | 


turn didn’t influence his com- 
pany’s decision to sign a five- 
| year, multimillion dollar deal 
| last month with Compaq Com- 
| puter Corp. Under the agree- 
| ment, Compaq will provide IT 
| services such as help desk and 


desktop support, as well as 
asset management. 

Doney said the Detroit- 
based insurer began looking 
for another vendor when Al- 
pharetta, Ga.-based outsourcer 
Inacom Inc. filed for bank- 
ruptcy protection in June. But 
Doney expects the new deal to 
“contain costs and stay within 
budget,” he said. 

Companies that have already 
deployed the latest technolo- 
gies may not find IT outsourc- 
ing to be a sound business 
decision. Gerry Geisler, senior 
vice president of Chubb Group 
of Insurance Cos. in Warren, 
NJ., said that from time to time 
his company has discussions 
with third parties that offer 
expertise in areas where talent 
is scarce. 

“If you have a mature IT op- 
eration and gotten good at it, 
you’ve developed service lev- 
els [that are] tough to beat” by 
outsourcer, he said. “We 

never really found anyone who 
| could save us money.” D 


an 





NEWS 


Group Maps RosettaNet 
‘To Supply-Chain Process 


Intel and Siemens lead the effort to align 
XML to SCOR model as industry standard 


BY MARC L. SONGINI 
NTEL Corp. and Siemens 
AG are spearheading a 
fledgling to 
marry XML to a complex 
set of supply-chain busi- 


initiative 


ness procedures to streamline 
e-commerce transactions 

The companies are taking 
RosettaNet, the electronics in- 
dustry’s XML-based language, 
and aligning it to the Supply 
Chain Reference 
(SCOR) model, aiming to cre- 
reusable, intricate 
dures based on standard sup- 


Operations 


ate proce- 
ply-chain practices. They are 
currently working on a pilot 
project that will serve as proof- 
of-concept for the initiative, 
though no specific time frame 
has been established. 

SCOR is the industry stan- 
dard set of procedures defined 
by the Supply-Chain Council 
Inc. in Pittsburgh, which has 
800 members, many of them 
large manufacturers, including 
Intel and Siemens. It 
best practices procedures for a 


offers 


wide variety of supply-chain 
activities, including the plan- 
ning, sourcing and delivery of 
goods, spanning from the sup- 
plier to the manufacturer to 
the end customer. 

The council’s board hopes 
the RosettaNet-to-SCOR initia- 
tive, if successful, will serve as a 
“frame of reference” that other 
industry groups, such as those 
serving the chemical or auto- 
motive industries, can use in 
the future, said Scott Stephens, 
the Supply-Chain 
chief technology officer. 

It's unclear how many coun- 
cil members have implement- 
ed SCOR procedures, but at 
least 100 have documented in- 
stallations, said Stephens. 

The initiative relies on tying 
specific SCOR procedures to 
RosettaNet Partner Interface 
Processes, which handle multi- 
ple data transactions among 
partners. Advocates claim that 
this will let RosettaNet handle 
new, sophisticated supply- 
chain processes and will result 


Council’s 


Nasdaq Begins Trading 
Stocks in Decimals 


BY MARIA TROMBLY 
The Nasdaq stock exchange 
caught up to the rest of the se- 
curities industry — and the 
rest of the world — last week 
when it finally dropped frac- 
tions and switched to decimal 
stock pricing. 

The transition went through 
without a hitch, said Scott Pe- 
terson, a spokesman for the 
Washington-based Nasdaq 
Stock Market Inc. 

As expected, the spreads 
(the differences between the 
buy and sell prices) shrank, 
with those for the most active 
stocks declining the most. A 
typical spread fell by approxi- 
mately 50%, Peterson said. 


| 


However, more time is need- 
ed before the exchange can 
accurately judge the change’s 
effect on volatility and trading 
volumes, he noted. 

The biggest fear — that op- 
tions exchanges would suffer 
from higher trading volumes 
— also didn’t come to pass. 

“Decimalization went ex- 
tremely well for us,” said Dan 
Friel, CIO at the International 
Stock Exchange, a New York- 
based options exchange. 

“Our systems were originally 
designed to handle everything 
in decimals,” he added. “In fact, 
what added complexity was 
having to support decimals and 
fractions simultaneously.” D 


in new collaboration capabili- 
ties. For instance, SCOR and 
RosettaNet could be aligned 
for things such as_ handling 
purchase orders or scheduling 
product deliveries, and they 
could take into account things 
as varied as different business 
methods and network protocol 
requirements. 

The initiative targets Roset- 
taNet because of its impor- 
tance to Intel and Siemens, but 
the companies intend to broad- 
en purview later, 
George Brown, a council board 
member and senior staff archi- 
tect for worldwide IT at Intel 
in Chandler, Ariz. “The ap- 


its said 


proach is independent. ... We 
plan to map to [other XMI 
standards] and are looking for 
a close alignment with 
ebXML,” a proposed specifica- 
tion for an electronic-business 
framework, he said. 

Some in the Supply-Chain 
Council expressed reserva- 
tions about whether mapping 
to SCOR will provide wide- 
spread benefit, however. Al- 
though the  RosettaNet-to- 
SCOR initiative is a good start, 
the technology 
needed to support it may be 
too expensive for smaller com- 
panies, said Jo Vegheim, a man- 
aging director at the Supply- 


investment 
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Chain Council’s Scandinavian 
chapter. 

“RosettaNet is good for inte- 
gration between large enter- 
prises, but we have to keep in 
mind that there are companies 
out there that are not major en- 
terprises,” Vegheim said. 

Ultimately, there may come 
a day when there will be dy- 
namic applica- 
tions that can handle complex 
ities and supply-chain excep- 
tions, said Joseph Francis, a 
Supply-Chain Council board 
member and director for strat- 
egy and governance for sup- 
ply-chain systems at Compaq 
Computer Corp. 

While supportive the 
RosettaNet-to-SCOR initiative, 
he said setting up standards 
processes, even for something 
relatively established like elec- 
tronic data interchange, takes 
months with companies “map- 
ping the bits and pieces” of the 
standards together. D 


self-learning 


of 





Borders Turns to Amazon for Outsourcing 


Renting online infrastructures is Plan B for struggling dot-coms 


BY LEE COPELAND GLADWIN 
After three years in the red, the 
second largest U.S. bookseller 
is calling it quits online, choos- 
ing instead to outsource its op- 
erations to Amazon.com Inc. 

In turn, Seattle-based Ama- 
zon is adopting a well-estab- 
lishe. model for drumming up 
additional revenue used by 
other dot-com companies with 
infrastructure to spare. 

For an undisclosed fee, Ama- 
zon.com will take the 
Web operations of Borders On- 
line Inc. and relaunch it as a 
co-branded site. It will be pow- 
ered by Amazon’s e-commerce 
platform and technology infra- 
structure. The online retailer 
will also handle inventory, cus- 
tomer service and shipping 
services for book, music and 
video sales. Ann Arbor, Mich.- 
based Borders Group Inc. will 
receive a commission on sales, 
officials at both firms said. 

“It’s only gravy for Amazon,” 
said Carrie Johnson, an analyst 
at Forrester Research Inc. in 
Cambridge, Mass. “They’re al- 
ready in the book business, 
they’ve eliminated a competi- 
tor and they will possibly get 
new customers and some in- 


over 


| cremental revenue.” 


the 
also 


officials said 


would 


Amazon 
online merchant 
seek out additional opportuni- 
ties to outsource its applica- 
tion infrastructure to other 
Web-based retailers, though no 
additional in the 
works. 

“Amazon is looking in all di- 
rections for ways to monetize 
what it already has,” said Faye 
Landes, a financial analyst at 
Sanford C. Bernstein & Co. in 
New York. But because of its 
unique fit, the Borders deal is 
unlikely to serve as a blueprint 
for other deals, she said. 


deals are 


Irving, Calif.-based Autoby- 
tel.com Inc. has also resorted 
to renting its application infra- 
structure to rivals to drum up 
new revenue. General Motors 
Corp. will run a 90-day pilot to 
test a new online sales model 
starting May 1 on Autobytel’s 
Web site (see story, page 17). 

GM paid a one-time fee to 
run the pilot, but Thilo 
Koslowski, an automotive ana- 
lyst at Gartner Inc. in Stam- 
ford, Conn., said the deal 
would never have been 
hatched if Autobytel didn’t 
need a revenue boost. D 


Amazon.com vs. Borders Group in 2000: 


Online 
Sales* 


Net 


Revenue 
$0 


$27M 


$0 iN t ALE 


$1.7B 


F BOOKS. M 


Net 
Income 


$0 


® AMAZON.COM INC. 
@ BORDERS GROUP INC. 


RANKINGS 
Amazon.com Inc. No. 1 Online bookseller 
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Oracle Offers a 
Wireless Sneak Peek 


Jacob Christfort, chief technology 
officer at OracleMobile Inc., provid- 
ed a glimpse of Oracle 9IAS (Inter- 
net Application Server) Wireless 
Edition 2.0 in an interview last 
week. The release, which will be 
available by the end of this year, 
will meld Oracle Corp.'s wireless 
hosting services with its application 
server product, Christfort said, 
noting that the melding was an 
acknowledgment that enterprises 
tend to want to off-load “mobile 
complexity” while maintaining their 
data and applications in-house. The 
new release will also support voice 
services, he said. 


Educause to Manage 
Top-Level .edu Domain 


A nonprofit organization that sup- 
ports closer integration of higher 
education and technology has been 
chosen to take over as manager of 
the Internet's .edu top-level domain. 
Educause, a Washington-based 
group of 1,800 colleges and univer- 
sities as well as hundreds of IT 
companies, is working out an agree- 
ment with the U.S. Department of 
Commerce's National Telecommuni- 
cations and Information Administra- 
tion to administer the .edu domain 
and its use by schools and colleges. 
Educause would handle registra- 
tions and administration of the .edu 
domain name registry, which is now 
handled by VeriSign Inc. in Moun- 
tain View, Calif. 


Bush Proposes Flat 
Federal IT Budget 


The Bush administration last week 
proposed a flat IT budget for federal 
agencies, with an increase of less 
than 1%, from $44.4 billion to 


$44.8 billion. According to Input, an | 


IT market research firm in Chantilly, 
Va., budget winners include the U.S. 
Department of Labor, with a 12% 
increase, and the U.S. Department 
of State and the Department of the 
Treasury, both of which are slated 
to receive 9% increases. Losers 
include NASA, down 6%; the So- 
cial Security Administration, down 
5.2%; and the U.S. Department of 
Justice, with a 2% decrease. Con- 
gress could change these numbers. 


~ NEWS 


New ‘Tools Address 


Denial-of-Service Threat 


Detection products provide early warnings 
but don’t stop such attacks, say users 


BY JAIKUMAR VIJAYAN 

ONCERNS ABOUT 
denial-of-service 
attacks are result- 
ing in a growing 


number of prod- 


ucts and services aimed at help- 
| ing companies detect, trace and 


| block the threat. But most of 
| the technologies do little to | 


| prevent such attacks outright, | 
| service provider. 


| users said. 
Denial-of-service attacks ba- 
| sically make computer systems 


servers or networks with use- 


iess traffic so legitimate users | 
| can no longer access those re- | 


sources. 


Last week, Cambridge, Mass.- | 
based start-up Mazu Networks | 


Inc. became the latest vendor 


to announce services based on | 


intelligent traffic analysis and 
filtering technology, which it 


claimed will help companies | 


better deal with such attacks. 


Mazu joins others, such as | 


Waltham, Mass.-based Arbor 
| Networks Inc., North 
| wick, NJ.-based Niksun 
| and Seattle-based Asta Net- 
works Inc., all of which have an- 

nounced services in this space 


| during the past few months. 


While each vendor claims to 


offer varying capabilities, the | 


basic focus is on tackling de- 
| nial-of-service attacks not just 
| at the Internet service 
vider level before 


pro- 
denial-of- 


service traffic actually hits cor- 


| porate Web servers, users said. 


Such capabilities are crucial | 


| for companies at a time “when 
denial-of-service attacks 


becoming more pernicious and | 


are happening with increasing 
frequency,” said Laura DiDio, 
an analyst at Giga Information 
Group Inc. in Cambridge, Mass. 

But while these products 
may be technically good point 
| solutions, the question that 
corporations need to ask is 
whether the products will 
scale enough to meet the re- 
quirements of the largest orga- 
nizations, DiDio added. 

Such products help by giv- 


Bruns- | 
Inc. | 
| BY JAMES COPE 


are | 





ing administrators early notice 


of a developing attack. They | 


also give administrators the 


ability to trace an attack back | 
| to its origins and filter out the 


offensive traffic much faster 


than current manual processes | 


can, said Amer Moujtahed, di- 
rector of systems engineering 


ta Mesa, Calif.-based Internet 


For instance, Mazu’s moni- 
toring devices that are distrib- 


inaccessible by overloading | uted at multiple network points | 


constantly analyze traffic, look- 
ing for network behavior that 


indicates the onset of a denial- | 


| of-service attack, such as a sud- 


den unexplained surge in traf- | 
fic. Information gathered from | 
all of the devices provides a | 


| broad picture of network traf- 


fic patterns that Mazu claims | 


will help users detect an attack, 
identify its source and stop it as 
close to its origin as possible. 
Arbor Networks collects 
comparable information 


both inside a corporate firewall 


and | 
| performs a similar analysis by | 
| setting up monitoring points | 
at Epoch Networks Inc., a Cos- | 


and on the pipes leading into | 


Internet service provider. 


ing an archival capability that 


| the corporate network from an | 
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Stopping Denial 


The anti-denial-of-service 
tools help administrators: 


= By monitoring network 
traffic and looking for patterns that 
suggest a denial-of-service attack. 


= By issuing alerts when 
abnormal traffic is detected. 


= By providing a way to 
quickly trace the route back to 
the point of origin of an attack. 


sun President Parag Pruthi. 
The idea behind such ap- 
proaches is that when a “partic- 
ular traffic pattern or hostile al- 
gorithm is detected, we are no- 
tified so we can make a deci- 
sion whether to shut down our 
server or not,” said Alex Golin, 
a vice president at Hamilton 


| Scientific Ltd., a Roseland, N,J.- 
Niksun adds a layer by offer- | 


let customers perform forensic | 
analysis on an attack, said Nik- | 


3com to Embed Firewall 
On Network Interface Cards 


Technology targets 
in-house hackers 


A new product introduced last 
week at the RSA Conference 


| 2001 in San Francisco by 3Com | 


Corp. and Secure Computing 


Corp. aims to halt, or at least | 
mischief car- | 
| ried out by insiders. 
| at corporate Web sites but also | 


deter, network 


San Jose-based Secure Com- 
puting has created a special 


| version of its Sidewinder fire- | 
wall technology that will re- | 
| side on firmware on 3Com Eth- 
ernet network interface cards. | 
These are the devices that plug | 
| enables network managers to | 
network | 


into servers and client PCs and 
connect users to 
servers through an Ethernet 
switch or hub. 

The new network card will 


Firewall and will be available 
from Santa Clara, Calif.-based 
3Com in the third quarter, ac- 


cording to a joint announce- | 


ment made by the companies. 
At the same time, 3Com 
plans to market a special serv- 
er that network managers can 
use to set security policies by 


| network to 


| into 


| unauthorized 


based application service pro- 
vider for health care providers 
that’s planning to use Niksun’s 
technology on its networks. D 


protocol usage on a specific 


} server. 


Michael Stark, a senior sys- 


| tems consultant at FleetBoston 


Financial Corp. in Boston, said 


| the idea of a firewall on a net- 


sending instructions over a | 


firmware in 


network cards, a company 


spokesman said. 


The ability to set security 


| policies on the firewall built 
interface | 


the 


network 


the | 


work interface card is new to 

him. “But it actually seems like 

a great concept,” he added. 
Stark said he’s concerned, 


| however, that the new card 


| could 


slow down network 


| throughput even though the 


card is what makes the new | 
3Com product different from | 


similar products that simply 
encrypt data, 
Steve Hunt, vice president of 
security research at Cam- 
bridge, Mass.-based Giga In- 
formation Group Inc. 
Encryption just 
traffic sent across a network 
channel, Hunt said. The fire- 
wall technology in the new 
3Com network interface cards 


according to 


3Com device has an onboard 
processor. 

Jerald Squires, security ad- 
ministrator at the Maryland 
Department of Transportation 


| in Glen Burnie, Md., said a fire- 


| protect 
scrambles | 


push global policy settings to | 


all such cards. 


| Policy Control 


be called the 3Com Embedded | 


For example, a network man- 
ager can set policies that deter 
network moni- 
toring (sniffing) or the use of 
fake addresses for denial-of- 
service attacks (spoofing). 

The technology would also 
let network managers specify 
policy by individual card, such 
as disallowing file transfer 


wall on a network interface 
card might make it easier to 
and administer PCs 
used by remote workers. 
Squires said that his agency 
currently has remote users 
whose PCs are protected by 
personal firewall software but 
that it’s difficult to enforce a 
security policy on those PCs, 
because users can change fire- 


| wall settings. 


Although 3Com said the 
street price of a network card 
for a desktop PC would be a 
modest $80, Hunt said that 
doesn’t spell immediate adop- 
tion of the new technology. 
Most companies buy their 
PCs with the cards already in- 
stalled and replace them only 
every three or four years, he 
noted. D 
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NEWS 


Retail Exchanges Push 
On Despite B2B Travails 


HI 


business-to-business sector has hit hard times, 


but the retail industry’s two major competing ex- 
changes are forging onward with big plans. 
Key players for the for-profit GlobalNetXchange 
(GNX) and the nonprofit WorldWide Retail Ex- 
change (WWRE) recently spoke with Computerworld senior edi- | 
tor Carol Sliwa about their progress and future direction, as both 
marketplaces marked their one-year anniversaries. 


JEREMY HOLLOWS, 
GNX 
Q: What drove GNX to its “mega- 
hub” model? 
A: That is a joint company at the 
moment between Transora and 
GNX. The hub will sell its ser- 
vices to exchanges, which will 
resell to [end-user companies]. 
Transora is effectively tak- 
ing the development of GNX.- 
net and migrating it into a 
business-to-business, multiex- 
change hub — providing a sin- 
gle which enables 
anyone to access exchange ser- 


on-ramp 


vices or send _ transactions 
through a hub without using an 
[electronic data 
value-added network]. 

We needed to provide con- 


nectivity to enable [com- 


panies] to access the exchange | 
| think you'll be a year from now? 
| A: 25% to 50% — and a lot of | 
that depends on the ramp-up | 
in the hub and the use of those | 


services and also to provide 
them with a single route — as 
opposed to having to maintain 


EDI VAN linkages and new | 
XML linkages and so on. EDI is | 


not going to go away, and com- 
panies don’t want to have to 
say, “Well, I send my EDI mes- 
sages this way, and I send my 
XML messages that way.” 


Q: How would you rate GNX’s tech- 
nology decisions? 

A: Certainly good — I wouldn't 
say perfect. ... One of the nega- 
tives that people 

put against GNX 

early on was it was 

too closely tied to 

Oracle. I think what 

we said was, “We'll 

be tied to Oracle 

when it makes 

sense, and we won't 

be when it doesn’t.” 

... I think, overall, 

that decision has 

turned out to be 

reasonably _ solid. 

We now have a rea- 

sonably good pro- 

duction operation. 


interchange | 
| commitment is about $260 bil- 


| a lot 


Q: Can you comment on the equity 


members’ level of activity to date? 
A: All of the [equity members] 
are doing auctions, and many of 


them are doing other things as | 
well. For example, Sainsbury | 
| there be a time when I don’t 


has taken the lead with CPFR 
[collaborative planning, fore- 
casting and 
Sears is doing community de- 
velopment around the mega- 


use of the megahub for EDI. 


Q: How close are the eight GNX 


replenishment]. 


importation management ca- 
pabilities. 

What you will see is pro- 
gressive uptake of those ser- 
vices this year, and in many 
ways, the big burn will proba- 
bly in 2002 
CPFR is hard work. It requires 
re-engineering 
processes inside the business. 


come because 


of of 


Q: Assess GNX’s limits. 

A: One of the CIOs at one of 
the members of GlobalNet- 
Xchange has said, “Well, will 


have any systems in my busi- 
ness?” Interesting thought. You 


| then say, “Well, does GNX be- 
| come an [application service 
hub. Carrefour has piloted the | 


equity members to meeting their | 
| of a wall-to-wall [enterprise 


purchase volume commitment? 
A: We're probably less than 5% 
of the way there. The volume 


lion 


Q: Can you estimate where you | 
| be moving to a much more 


services and the continued de- 


velopment of the marketplace | 


auctions. 


the GNX vision? 


because it’s always changing. I 
think this year, we will see the 


primary functionality available | 


in a production en- 
vironment. 
ously, auctions are 
already well estab- 
lished. 


log functionality 
should be there 
during this year. 
The megahub is al- 


ready available and | 


will be fully pro- 
duction-available 
by the middle of 
the year. We will 
have some product 
development 


provider] to some services? 
Does it link with an ASP? What 
is the model?” 

What is very clear in my 
view is the possible evolution 


resource planning] model in 
retail will not happen .. 
cause the exchanges will fill 
half of that space. Maybe half is 
not quite the right percentage. 
But essentially, we’re going to 


. be- 


modular development of the 
other tools that we need to run 
a business. And even that mod- 
el might change over time. 


| Q: What are the biggest miscon- 


| A:I don’t think it ever ends. I | 


don’t think you ever get there | 


Obvi- | 


CPFR is | 
now in pilot. Cata- | 





| ceptions about GNX? 
Q: How close are you to achieving | 


A: First, that it's Carrefour and 
Sears. It’s actually eight [equity] 
partners. ... I think the other 
thing people misconstrue is the 
fact that we are a profit-orien- 
tated exchange. It’s a for-profit 
model, and they have some- 
times said, “Well, you see, what 
they’re going to do is try and 
make more money out of that 
than they can out of retail.” 
Hopefully the business will 
make a profit. But the way we 
are structuring it is about deliv- 
ering value to businesses, and 
the for-profit is about the prag- 
matic — making good deci- 
sions quickly, moving forward, 
getting them implemented. 
[Another misconception] is 
people still think it’s a closed 
club. In fact, it’s a very open ex- 
change, and we have small and 


and | big retailers. D 


GERARD VAN BREEN, 
WWRE 

Q: Assess the progress of WWRE 
during its first year. 
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to work. You have to think. You 


| have to sit back and go through 
| your processes. You have to 
| convince people. You have to 


consider your current prac- 


| tices, your systems and every- 
| thing. It’s not easy work. It’s 


not a piece of cake. But the 
more we do about it, the more 


| excited we get about the po- 


tential that we see for using it. 


| Q: What role will electronic data 


A: We announced [WWRE] on | 
| A: I don’t think the WorldWide 
and nothing else. We knew | Retail Exchange will complete- 
| ly move away from EDI. When 


the 3lst of March with a vision 


there was software available. 
We knew that there 
were parties inter- 
ested to support it, 
build it, But 
that was all we had. 
We signed a let- 
ter of intent [for 
our technology] on 
July 20, and still, at 
that time, we didn’t 
have anything. And 
then [we did] the 
first auction 
than one month 
[later]. Since then, 
it has been moving 
continuously. 


etc. 


less 


GERARD VAN BREEN, 
a senior vice presi- 
dent at Royal Ahold 
NV in the Nether- 
lands, helped launch 
the WWRE. 


interchange (EDI) play in WWRE? 


we have a business 
practice on EDI, we 
will most likely 
keep it and contin- 
ue to do it. I think 
the XML applica- 
tions will first be 
addressed to the 
smaller and medi- 
um-size suppliers 
that don’t do EDI 
with us today. 


‘ 


Q: Will your hub pro- 
vide a translation ser- 
vice? 

A: The WWRE is 
going to do that. 


Q: In what areas will WWRE mem- | We'll take care of the transla- 


bers see the greatest benefits? 

A: I think ultimately the biggest 
advantage will come from the 
total workflow system of the 
whole procurement process — 
be it on promotion, distribu- 
tion, pricing 
that together with your suppli- 
ers, of course. 

CPFR [collaborative plan- 
ning, forecasting and replen- 
ishment], I think, is going to be 
a major value contributor. We 
will have the first tests in June, 
evaluate it in August, refine 
whatever needs to be refined, 
and I think before the end of 


the year, we can have a practi- | 


cal solution that is usable. 


Q: Realistically, what do you think 
your company will be doing 
through the exchange next year? 
A:I think we can do a major 
portion of our [requests for 
information, proposals and 
quotations] next year, com- 
pletely electronic. I don’t know 
exactly what portion of our 
global business that will be, but 
10% of our transactions is not 
unlikely. 


Q: How do you respond to critics 
who doubt the long-term viability 
of WWRE? 


A: This is not magic. You have 


and linking | 





| tion service between EDI and 
| XML. 


Q: What has been the greatest 
challenge so far? 

A: It was really hard to develop 
our vision on what is just be- 
hind the horizon. What we 
found was that a lot of people 
have ideas on it — technology 
providers, systems integrators, 
consultants. But what you real- 
ly find is that when you get to 
these new areas of develop- 
ment, that nobody can really 
help you, that you're really on 
your own. 


Q: How close is WWRE to meeting 
its original plans? 

A: We had a time plan that was 
established on April 19 last 
year. We said that we would 
have a company by June 1, that 
we would have a CEO by Oct. 1, 
that we would have a company 
on its feet by Jan. 1. I think the 
only thing that we will not 
meet is that we had expecta- 
tions that the company could 
break even by the end of this 
year. That is something that we 
will not make. 


Q: Next year, perhaps? 
A: Yes. I think that should be 
possible. D 





Accountants take jobs. 
Bankers take jobs. 
Middle managers and 


busboys take jobs. 


IT people get to choose jobs. 


It’s good to be king. 





Dice is the job site created by IT professionals, 
exclusively for IT professionals. And Dice lets you 
announce your availability to prospective employers, 
letting them know you’re ready to work now. Find your 
ideal opportunity at the number one IT career site 
on the Web, www.dice.com. 
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nobody gets IT like dice 
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‘Delta 


Database Problem 
Snags Walmart.com 


Wal-Mart Stores Inc.'s Internet 
presence was shuttered for approxi- 
mately nine hours last Wednesday 
because of database problems. A 
spokeswoman for Walmart.com Inc. 
in Brisbane, Calif., said an unspeci- 
fied database glitch caused the 
company’s entire Web site to go 
down around 1 a.m. PDT on April 11. 
The problem was fixed by 9:50 a.m. 


ea ROL RSPR MA SLAP 
Fleet Hoists E-Billing 
Boston-based FleetBoston Financial 
Corp. is deploying an online state- 
ment and electronic-billing applica- 
tion that will allow consumers to ac- 
cess and manage their monthly bills 
at Fleet's online banking sites. The 
application, which the bank is li- 
censing from Natick, Mass.-based 
Edocs Inc., will also enable Fleet to 
offer its corporate customers the 
ability to send customer statements 
and invoices and receive payments 
electronically. 


More Pink Slips at 
Consulting Firms 


Blaming the slowdown in IT spend- 
ing, accounting and consulting firm 
PricewaterhouseCoopers last week 
said it's cutting 750 to 1,000 jobs 
from its U.S. consulting unit, while 
Internet consulting firm Scient Corp. 
said it’s cutting 675 jobs, or 52% of 
its workforce. Scient also warned of 
wider-than-expected losses for its 
fourth quarter and said it may cut an 
additional 175 jobs in the coming 
months. In December, Scient 
slashed 460 jobs; In January, Price- 
waterhouseCoopers cut 400 jobs 
from its U.S. consulting unit. 


Short Takes | 


Online delivery trailblazer KOZMO 
INC. shut down its Web site, ceased 
delivery operations and said it 
would liquidate all assets. . . . INTEL 
CORP.’s new Itanium processor ex- 
ceeded Intel's own benchmark for 
processing speed in an independent 
test by NETWORKSHOP INC., an IT 
services firm in Montreal. . . . Ailing 
Internet consulting firm MARCH- 
FIRST INC.’s U.S. subsidiaries and 
affiliates filed for Chapter 11 bank- | 


| span LP and Sabre Inc. cache 
| availability and often push that 
} out to online channels. 





ruptcy protection. 


to-be-launched travel | 
site Orbitz. Delta is one of the | 
five partner airline owners of 
that site. 

“We saw what they 
could do for Orbitz, 
in terms of finding 
low fares and han- 
dling all of this on- 
line demand, and we 
thought, ‘Why not 
bring that in- 
house?’ ” Caminiti 
said. “The challenge 
of e-commerce is 
finding ways to im- 
prove the _ things 
you've always done 
to do them better.” 

Internet-based sales 
have created a partic- 
ular problem inside 


online 


| the travel arena. While many | 


dot-com businesses _ have | 
failed, travel sites are booming 
as consumers purchase 
creasingly greater numbers of | 
airline tickets and hotel rooms | 
online. 

Henry Harteveldt, a senior 
analyst at Forrester Research 
Inc. in Cambridge, Mass., esti- 
mates that online travel sales 
will rise 38% this year, from 
$12.2 billion to $16.7 billion. 

“Yet the problem for the air- | 
lines is not the ticketing; it’s 
the messaging hits for the 
prices,” he said. 

Third-party online distribu- 
tion channels perform roughly 
10 fare searches for every pur- | 


in- 


| chase they make, which puts | 


tremendous stress on the air- 
lines to push out real-time data 
and the lowest available prices. 

David Beitel, vice president 
of product development at on- 


| line travel agency Expedia Inc. | 
| in Bellevue, Wash., pointed out | 
| that 


archaic airline reserva- | 
tions systems weren’t con- 
structed with messaging in 
mind. He said no airline has yet 
figured out how to supply that 
information in 100% real time. 
He noted that computer res- 
ervations systems like World- 


“Then you get into how long 
can you trust that information 
that you cached,” Beitel said. 

In March, Dallas-based 
Southwest Airlines Co. and 
Fort Worth, Texas-based on- 


AMERICAN AIR- 
LINES CIO Monte 
Ford: “We have to 
figure out where 
this demand is go- 
ing and get there 
before it happens.” 





line travel agency Travelo- 


NEWS © 


| city.com Inc. mutually agreed 


not to sell Southwest's tickets 
over that channel because the 
two parties couldn’t come to 
an agreement on how to sup- 
ply live availability informa- 
tion to Travelocity customers. 
Last month, Fort 


| 
| 
| 
| 


Worth- | 


based AMR Corp.’s American | 


Airlines Inc. sub- 
sidiary reabsorbed 
250 IT workers that 
had __ stayed 


Sabre when Ameri- 


| were 
with | 


can spun it offto help | 


tackle this very prob- 
lem. 
“External 
is something we’re 
very concerned about 


said American Air- 
lines CIO Monte 
Ford. “We have to 
demand is going and 
get there before it 
happens.” 


| erate in conjunction with an | 
demand | 


| building a brand-new system | 
and very keen about,” | 


| said. “It wasn’t so much any | 
one requirement that caused a | 
problem as the sheer number | 


figure out where this | 


“Every time a request comes 
across, it slows the system, and 
the number of requests are 
growing daily,” said Scott Gar- 


ner, managing director at Unit- | 
ed NetVentures, which coordi- | 
e-commerce | 


nates United’s 
initiatives. 


“It’s a matter of constantly | 


upgrading our traditional yield- 
management systems, which 
created for an off-line 
world.” 

Jeremy Wertheimer, presi- 
dent and CEO of ITA, said 
retrofitting his software to op- 


airline’s legacy systems proved 
every bit as challenging as 


for Orbitz. 


“You have to get around or- | 


ganizational traditions,” he 


| of requirements you have to 
| meet.” 


: . 
United Air Lines Inc., a sub- 


sidiary of Elk Grove Township, 


Ill.-based UAL Corp., is also | 


trying to solve the problem. 


Continued from page 1 


‘Privacy 


nagle called the lack of a feder- 
al privacy coordinator a 


Last year, former Delta CIO 
Charles Feld called the Delta- 
matic reservation system “our 


heart and lungs.” But Caminiti | 


gues Peter Swire, who served 
as the Clinton administration’s 
chief counselor for privacy 


| from March 1999 until January 


“bad | 


sign” for the Bush administra- | 


tion’s approach to privacy. 


The White House has decid- | 


ed not to appoint a “chief 
counselor for privacy,” a posi- 
tion created by the Clinton ad- 
ministration. Instead, it will 
put responsibility for privacy 


and Budget (OMB) Director 


| Mitchell Daniels and the yet- | 
to-be-appointed deputy direc- | 


tor, said White House spokes- 
man Jimmy Orr. Those offi- 
cials will work closely with 
whoever fills the expected po- 
sition of federal CIO, he said. 
Orr said the decision doesn’t 
signal any diminishing of the 
importance that President 
Bush places on privacy. “What 
is important is that privacy is- 
sues will continue to be a top 
priority for the president, and 


| OMB is going to be the loca- 


tion where privacy issues are 
dealt with,” he said. 

The growing complexity of 
privacy issues in government 
creates the need for some kind 
of coordinating position, ar- 





| “There 


of this year. “There are some 
jobs that need to be done 
whether you create this posi- 
tion or not,” he said. 


Swire was responsible for en- | 
| . 
a privacy 


suring that regulatory agencies 
didn’t develop conflicting pri- 
vacy rules for the industries 


they regulate, as well as for pro- 
| viding guidance 
| agencies on complying with 
issues in the hands of White | 
| House Office of Management 


to federal 


rules governing federal records. 


He also served as a liaison for | 
privacy groups to bring their | 


concerns to the administration. 

“There sure was plenty of 
work for us to do,” said Swire. 
was no shortage of pri- 
vacy issues in the few 
years.” 


last 


Ari Schwartz, a policy ana- | 


lyst at the Center for Democra- 
cy and Technology in Wash- 
ington, questioned whether 
OMB’s director, who is preoc- 
cupied with the budget and 
other issues, can be a substi- 
tute for the three-person staff 
that addressed privacy issues 
exclusively during the Clinton 
administration. “We think it’s a 
major concern,” he said. 

The White House decision 
comes as Republican leaders, 
including House Majority 





COMPUTERWORLD April 16, 2001 


Every time a 
request comes 
across, it slows 

the system, 
and the number 

of requests 
are growing daily. 


SCOTT GARNER, 
MANAGING DIRECTOR, 
UNITED NETVENTURES 


said the time is right to per- 
form a transplant. 

“Our customers want more 
information and better op- 
tions,” he said. “This is what 


| we need to do to deliver it to 


them. You have to be willing to 
make deep changes in order to 
make e-commerce work for 
your company.” D 


Leader Richard Armey (R- 
Texas), are insisting that gov- 
ernment agencies fix their own 
privacy and security problems 
before passing legislation reg- 
ulating the private sector. But 
Armey spokesman Richard Di- 
amond said the push for re- 
form doesn’t necessarily mean 
chief is needed. 
“Having a privacy czar is one 
way to do it, but there may be 
other ways,” Diamond said. “I 
don’t think it matters what way 
you choose, as long as the goal 
is met.” D 


s 
Different Routes, 
s s 
Same Destination 
How the Clinton and Bush 


administrations have dealt 
with privacy rights: 


CLINTON: Appointed pri- 


vacy chief to oversee pri- 
vacy issues and regula- 
tions as they relate to fed- 
eral agencies and the pri- 
vate sector. 


BUSH: No privacy chief. 
Responsibilities will be 
handled by Office of 
Management and Budget 
director and deputy di- 
rector. 
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working together to create 
interoperability standards that 
could make SAN implementa- 
tions easier. 


wanted to increase its storage | 
utilization rates, which ranged 
from 35% to 50%. Data avail- | 
ability, disaster recovery and 
usage have been improved, he 

| 


Continued from page 1 


Storage 


management and sizing. In- 
cluded in the plan is the con- 
solidation of more than 700 


- Hesitant Users Take Long-Term View 


midmarket storage appliances in 
Sunnyvale, Calif., said its fourth- 
quarter revenue is expected to be 
20% to 25% less than that of the 
previous quarter. The firm blamed 


“In the outside world, when | in Seene tous econcnic Hones, 
s appears that the days when man- 
you talk to [a particular | 
nett a. ie eee agers made storage technology 
vendor], all you get is their purchasing decisions based on 
factors like improved data backup 


added, but there still are issues 
to be resolved. 

Morgan Stanley’s approach | 
so far has been to install nu- 


product,” Dryden said. As he | 


servers into a smaller number 
of systems. 

Until it conducted an inven- 
tory of its storage capacity, the 
investment banking firm had 
no hard figures on how much 
capacity it had and 
how much of that was actually 
being used, Arbona said. The 
inventory found that only 52% 
of the capacity was in use, 
resulting in a large surplus that 


storage 


was being stockpiled because 
IT managers weren’t sure how 
much space was needed. 

And things can become even 
more complicated once a SAN 
implementation gets under way. 

Michael Butler, a vice presi- 
dent at Morgan Stanley Dean 
Witter & Co., said the New 
York-based brokerage faced 
initial challenges that included 
incompatible 
multiple vendors, a lack of 
robust network management 
software and inadequate tech- 
nical support. 

“To solve these problems, 
we basically did it ourselves,” 
Butler said. 

Morgan Stanley, which be- 
gan work on its SAN project 18 
months ago, created an inter- 
nal integration team as well as | 
storage engineering groups at | 
each office campus to perform 
trend analysis and capacity 
planning and install new stor- | 
age technology without affect- 
ing the company’s existing 
systems. 

Butler said the company 
wanted to create a more reli- 
able architecture for its 250TB 
of storage capacity on 4,000 | 
Windows NT and Unix | 


servers. At the same time, it | 
1 


switches from 


| 
What’s a 
SAN? 


> A storage-area network 
(SAN) is formed when at least two 
servers communicate with a number 
of storage arrays that are connected 
through a subnetwork of traffic-con- 
trolling devices such as hubs or 
switches 


by Fibre Channel, a gigabit transmis- 
sion technology that supports various 
peripheral interfaces and communi- 
cation protocols. 


| prove the security capabilities 


| until Windows XP and the next 
| version of the Windows Server | 
| product, which is code-named 
| Whistler, start shipping before 


| new internal program called 
| which will provide Microsoft 
| engineers with ongoing educa- 
| tion, 


| rigorous internal and external 


merous separate SANs. For 
example, Butler said, the com- 
pany has five SANs in the New 
York area. Each SAN fabric is | 
duplicated and linked to its | 
backup through fiber-optic 
rings with dense wave division | 
multiplexing. The current set- | 
up is a “tactical solution” that’s 
reliable but not very scalable, 
he said. 

Interoperability is also a key 
issue, said managers. Like oth- 
er users at the conference, Eric | 
Dryden, an information sys- | 
tems project manager at Hous- | 
ton-based Agip Petroleum Co., | 
said he was pleasantly sur- | 
prised to hear rival storage | 
vendors at least talking about | 


browsed through the confer- | 


ence’s_ interoperability lab, 
Dryden lamented his inability 


| to find technology that could 


be used to consolidate Agip’s 
tape backup systems. 

One user said the best way to 
deal with interoperability is to 
avoid it altogether. 

Gary Fox, a senior vice pres- 
ident and director of enter- 


| prise data storage at Charlotte, 
N.C.-based financial 
| company First Union Corp., 


services 


advised attendees to steer clear 
of mixed vendor environments 
for the time being. 
should keep their storage net- 
working architectures as sim- 
ple as possible by using homo 


Users 


geneous switches, he said. D 


speeds may be over. Companies 
are now focusing on total cost of 
ownership and the long-term re- 
turns that storage investments 
can bring - and they're not spend- 
ing quite as freely 

The trend was apparent when 
both EMC Corp. and Network Ap- 
pliance Inc. announced that earn- 
ings for their most recent quarters 
would be below expectations. 

Joe Tucci, president and CEO 
of Hopkinton, Mass.-based EMC, 
said first-quarter earnings are now 
expected to come in at around 
$394 million, about 10% lower 
than what financial analysts had 
previously estimated. He cited 
“some purchase hesitation from 
our customers” as the cause. 

Network Appliance, a maker of 





“delays in customer orders.” 

Taking an economically pru- 
dent, long-term view toward 
storage spending was a recurring 
theme among the more than 
2,000 attendees at last week's 
Storage Networking World Con- 
ference. 

Jeff Kizlik, a senior systems 
engineer at Best Buy Co. in Eden 
Prairie, Minn., said the electronics 
retailer in February installed a SAN 
that backs up 6TB of data daily. 
But, he added, the conference 
opened his eyes to the fact that 
the network was an investment, 
not just a technology purchase. 
“When we get back, we need to 
think about the future a little 
more,” Kizlik said 

~- Lucas Mearian 





Microsoft Launches 
Security Initiatives 


New capabilities will appear in both 
Whistler and Windows XP, company says 


BY JAIKUMAR VIJAYAN | 
ICROSOFT Corp. | 
is taking steps | 
to make Win- 
dows a more se- 
cure operating 

environment. 

The company last 
announced plans to integrate 
new technology into upcoming 
versions of Windows that it 
claims will dramatically im- 


of the operating system. 
But users will have to wait 


they see the technology. 
Microsoft also announced a 


the Secure Windows Initiative, 


security-focused 
processes and 


tools, 
development 


| dows 
week | 





testing to ensure more atten- 


tion to security, according to | 


the company. 
On the technology front, Mi- 


| crosoft is integrating new soft- | 


ware restriction policies into 
upcoming versions of Win- 
that will let systems 
administrators specify the ap- 
plications that are allowed to 
run on Windows while barring 
other applications, said Scott 
Culp, a manager at Microsoft. 

For instance, an adminis- 
trator could set policies that 
allow only applications such 
as Word and Excel to run. 

The technology will look for 
specific markers, such as file 
size and other signed integrity 
credentials, before allowing 
applications. This will keep 
hackers from getting around 
the policies by overwriting ap- 
proved applications with mali- 
cious code, Culp said. 

Microsoft's efforts are a step 
in the right direction, said 
Russ Cooper, an analyst at 
TruSecure Corp., a security 





| firm in Reston, Va. But the suc- | 
| cess of the new features will 


depend on how easy Microsoft 


| makes the implementation for | 


administrators, he added. 

“The problem with making 
things very granular is that it 
becomes difficult for people to 
figure out how to configure the 
system to make it both secure 


Security Upgrades 


Microsoft is integrating the 
following features in upcom- 
ing versions of Windows: 


= Software-restriction poli- 
cies that will let systems 
administrators specify 
the applications that 

are permitted to run on 
Windows while barring 
other applications. 


= Anew security layer as 
part of the Common Lan- 
guage Runtime environ- 
ment that will let admin- 
istrators define limits on 
the kinds of applications 
and services that can be 
accessed by another ap- 
plication. 





and usable at the same time,” 
said Cooper. 
Some of 


the permission- 


| based features that Microsoft 


is talking about have been 


| available for years in the main- 
frame and Unix worlds, said 


Josh Turiel, MIS manager at 
Holyoke Mutual Insurance Co. 
in Salem, Mass. “It shows that 


| Windows is evolving in the 


right direction,” Turiel said. 
“But it has to have the right 
balance between simplicity 
and security for [features such 
as these] to work.” 

Microsoft is also adding a 
new security layer as part of 
the Common Language Run- 
time environment, which man- 
ages the execution of code on 


| Microsoft’s .Net framework. 


The technology will let ad- 


| ministrators define limits on 


the kinds of applications and 
services that can be accessed 
by another application. 

For example, an adminis- 
trator can define a policy that 
allows an application to access 
the contents of a specific data- 
base, while preventing it from 
accessing the contents of an- 
other database. 

“We are going from coarse- 
ness to fineness,” Culp said. 
“The security update was the 
most coarse protection scheme. 
... There are going to be addi- 
tional levels of protection that 
you are going to see in Whistler 
and XP." 





JTE, WASHINGTON 


SOURCE: PROGRESSIVE POLIC 
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Off-line Dealers Push | 
For Legal Protection 


Amid turf battle, some middlemen 
call for truce with online rivals 


BY STACY COLLETT 
WENTY-EIGHT 
years in the auto- 
mobile industry 
have taught Au- 
tobytel’s Chick 

Ramsay a simple truth about 

the business: Don’t try to cir- 

cumvent the dealer network. 

Ramsay is a senior vice pres- 
ident at Autobytel.com Inc., an 
online car-shopping service 
that’s keenly aware that auto 
dealers jealously guard their 
turf from encroachment by 
e-commerce firms. For exam- 
ple, car dealers in nine states 
have already successfully lob- 
bied to toughen state franchise 
laws, which make it difficult 
for manufacturers to bypass 
franchised dealers and sell cars 
directly to consumers. 

So last year, when General 

Motors Corp. asked Irvine, 

Calif.-based Autobytel to test a 


new locate-to-order sales pro- | 





gram, “I foresaw difficulties,” 
recalled Ramsay. 


He knew he would need to | 


get the dealers’ blessings. So 
GM and Autobytel officials ran 
their idea by the powerful Na- 
tional Automobile Dealers As- 
sociation in McLean, Va., as 
well as 22 Chevrolet dealers in 
the Washington area _ that 
would be participating in the 
pilot program. 

The plan was to let the deal- 
ers set online prices for the ve- 
hicles in return for letting GM 
and Autobytel list their Chevy 
inventory online. 

The peace overture paid off. 
Ramsay said that, to his sur- 
prise, the meetings went rela- 
tively smoothly. The 90-day 
trial is set to begin May 1. 

“[Vehicle dealers] are not 
about to give up their position 
in the marketplace. But they 
view the Internet as an oppor- 
tunity, not a threat,” said 


Revenge of the Middlemen 


Traditional companies are using protectionist tactics to fend off 


online rivals. 
USES Meme) tg od 8) alg 


North Carolina 
Auctioneer Li- 
censing Board 


F 


National Associ- 
ation of Record- 
ing Merchandis- 
ers (NARM) 


mee ere 
eBay Inc. and 


other online 
auctions 


CDnow Inc. 
(owned by Sony 
Music Entertain- 
ment Inc., a unit of 


a tLe 


Board wants participat- 
ing sellers to be licensed 
by the state or face mis- 
demeanor charges and 
a $2,000 fine. 


Congress passed a law 
allowing states to sue if 
directly to consumers in 
the 30 states that outlaw 
Internet wine sales. 


NARM sued Sony for 
undermining retail 
outlets by allowing 
direct online sales. 


Bertelsmann AG) 


+800 
Contacts Inc. 


AOA pressured manufac- 
turers to distribute only 
to licensed optometrists, 
not online retailers. (So 
dot-coms must buy from 
wholesalers, not manu- 
facturers.) 


| 





Robert Maguire, chairman of 
the dealers’ association. 

Warily, online retailers and 
traditional dealers in the auto 


| industry seem to be entering a 


cease-fire period, but the turf 
battles in other industries are 
still going strong. For more 
than a year, traditional music 
stores, wine and beer whole- 
auctioneers, contact 
lens providers and even radiol- 
ogists have filed suit or lobbied 
for legislation to restrict online 
businesses (see chart). 

The traditional businesses 
say they’re just trying to elimi- 
nate the unfair advantages of 
e-commerce. The online busi- 
nesses counter that the inter- 
mediaries are fighting to hang 


salers, 


| onto outdated business models 


and laws, while thwarting con- 
sumer choice. 

Middlemen cost Americans 
more than $15 billion annually 
through markups, commis- 
sions and fees, according to the 
Progressive Policy Institute, a 
Washington-based think tank 
that favors a hands-off ap- 
proach to Internet policy. 

So far, the traditional busi- 


nesses haven’t actually won | 
: | 
against 


many legal battles 
e-commerce. 

“There aren’t a lot of Inter- 
net-specific laws on the books” 
because legislators didn’t want 
to trip up the booming Inter- 
net, said Jeremy Sharrard, a 
public policy analyst at For- 
rester Research Inc. in Cam- 
bridge, Mass. However, some 
industries, such as the auto 
dealers, have been successful 
in applying older laws to Inter- 
net companies, he added. 

Some observers are warning 
brick-and-mortar 
not to jump on the anti-e-com- 
merce bandwagon too quickly. 

“Businesses may have short- | 
term gain but long-term prob- 
lems [by pushing restrictive 
legislation],” said Rick Lane, a 
high-tech lobbyist at the U.S. 
Chamber of Commerce 
Washington, which represents 
3 million businesses. “Pretty 
soon, they'll all be online.” 

The travel industry has wit- 
nessed this evolution first- 
hand. Traditional travel agen- 


companies | 


in | 





cies, once pitted against online 


The power 
of the dealer 
network is 
stronger 
than ever. 


CHICK RAMSAY, SENIOR VP, 
AUTOBYTEL 


travel sites, are now teaming | 


with the likes of Fort Worth, 
Texas-based Travelocity.com 
Inc. and Bellevue, Wash.-based 
Expedia Inc. 

“You have to be insane not to 


recognize that the Internet is | 





| for 


| LLC, 
| travel site developed by five 


| they have curbed traditional 
| agency commissions. 


ASTA also has filed a com- 
plaint with the U.S. Depart- 
ment of Justice seeking to 
block the launch Orbitz 
a Chicago-based online 


of 


major U.S. airlines. ASTA ar- 
gues that the airline-owned 


site will unfairly gain market 


share by offering exclusive ac- 
cess to preferred fares. Orbitz 
attorney Gary Doernhoefer 
said the site will have lower 
fares because Orbitz will elimi- 
nate the hidden fees paid to 
Fort Worth, Texas-based Sabre 
Inc. and other reservations 
systems that travel agents use. 
Doernhoefer said ASTA 
needn’t worry that travel agen- 
cies will be forced out of busi- 
ness. “When you're taking a 
two-week trip with a cruise in 
the middle, that’s when you 
call a travel agent,” he said. But 
simple ticket he 
added, travel agents are likely 
to be replaced by the Internet. 
Meanwhile, protectionist 


sales, 


| tactics continue in other indus- 
| tries. Legislation introduced in 
| Colorado would make it illegal 
| for pharmacy benefits man- 
| agers to offer discounts to resi- 
| dents who purchase drugs out 


of state by mail or online. In 


| Virginia, a state optometrists 
| association opposed a bill that 
| would let residents renew dri- 


vers’ licenses online. (The bill 


| passed anyway.) 


| 
| 


where people want to go to 


transact business. We’re not 


against it; we’re trying to get | 
| in May on the state of Internet 


our members to be more profi- 
cient and effective with it,” 


said Paul Ruden, senior vice | 


president of legal and industry 


affairs at the American Society | 
of Travel Agents (ASTA) in | 
tional and online companies 


Alexandria, Va. 
Now Travelocity, 


Expedia | 


and traditional travel agencies | 


are uniting against 
nemesis: the airlines. In March, 
St. 
west Airlines Inc. and Nether- 


a new | 


Paul, Minn.-based North- | 


lands-based KLM Royal Dutch | 


Airlines announced _ they 
would stop paying commis- 


sions to Internet travel agen- | 


cies in much the same way 


“The middleman backlash is 
very quiet and very effective 
and shows no signs of abating,” 
said Rob Atkinson, director of 
the technology and new econ- 
omy project at the Progressive 
Policy Institute. Atkinson’s re- 
port, “Revenge of the Disinter- 
mediated,” which 
the off-line rush for protection, 
spurred the Federal Trade 
Commission to hold hearings 


chronicles 


competition. 

Ramsay said he hopes the pi- 
lot program involving Wash- 
ington-area Chevy dealers will 
show all industries how tradi- 


can work together. “A year ago, 
everyone said the Internet is 
the way to go and bye-bye deal- 
ers. I said, ‘It ain’t gonna hap- 
pen,” he said. “The power of 
the dealer network is stronger 
than ever, and we'll continue to 
work with the dealers.” D 


Collett is a freelance writer in 
Sterling, Va. 
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WHICH IS 


WHY 


we just call it 


BLACK ROCKET 


Don't let the catchy name fool you. 


Genuity’s Black Rockef’ is a revolu- 


tionary eBusiness Network Platform 
that combines critical network 
services with our own high-speed, 
Tier 1, fiber-optic global 
network into a single, 
secure, scalable foundation 
on which to run your 
applications. It integrates 
Managed Hosting, Access, 
Transport and Security in one 
ready-to-launch package. 
Reducing the complexity, 
time and cost of building 
and deploying your eBusiness. 

But if you checked out the 
schematic to the left, you already 
know that. 

Genuity’s Black Rocket’ also 
gives you single-source accounta- 
bility. Once your eBusiness is up 
and running, Black Rocket” provides 


a secure, managed and resilient 


Black Rocket 


is Genuity s 


Network Platform 


environment with 24/7 technical 
support and proactive monitoring in 
Genuity’s state-of-the-art Network 
Operations Center. All backed by a 
comprehensive Service Level Agree- 
ment assuring uptime 

Of course, there are 
some things you can’t see 
in a schematic. Like our 
“Rocket Engineers” who 
can provide a strategic 
plan for launching your 


eBusiness initiatives, so that 


eBusiness 


your project runs smoothly 
from the start. And by 
partnering with industry powerhous- 
es for best-of-breed applications, 
systems integration and _ tech- 
nologies, Genuity” can deliver 
turnkey managed solutions to meet 
your needs. 

Put this kind of thinking to work 
on your eBusiness. Visit genuity.com/ 


blackrocket or call 1-800-GENUITY. 


A BRIEF 
HISTORY 


was hired by the U.S 
government to 


Jevelop the ARPAnet 


In 1997, BBN was 
acquired by GT 


company tha 


GENU TY 


In 2000, GTE 
Internetworking became 
an independent 
company, renaming 
tself Genuity 
Today, we offer a vast 
array of managed 
Internet services 


including Black Rocket 


GENU'TY 





Is Server Consolidation 


the Answer? 


t www.unisys.com/e- 


biz/webcasts. 
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NEWS 


FTP Flaw Makes 
Servers Insecure 


Unix shell commands could enable remote intrusions 


BY TODD R. WEISS 
ECURITY 
sued warnings about a soft- 
ware flaw that they said could 
allow intruders to gain unau- 
thorized access to remote file 

transfer protocol (FTP) servers. 

In an advisory issued last week, Net- 


ANALYSTS have is- 


work Associates Inc.’s PGP Security 
division said the problem is related to 
the “globbing” command used in Unix 
shells. The command essentially acts as 
a path name generator, allowing users 
arch for multiple file names by en- 
tering shorthand commands that are 
then used by the software to search for 


to se 


common patterns. 

Santa Clara, Calif.-based PGP said its 
Computer Vulnerability Emergency Re- 
sponse Team found a flaw that allows 
the pattern expansion done through the 
glob function to instead be directed to 
cause various buffer overflows in FTP 
servers — a capability that could enable 
malicious attackers to gain root-level 
privileges. 

The problem is said to usually affect 
only FTP servers that give remote users 
the ability to create directories on the 
system hosting the FTP daemon. That 
will likely restrict the vulnerability’s 
threat, said Greg Shipley, security ser- 
vices director at consulting firm Neo- 
hapsis Inc. in Chicago. 

“In addition to the threat of data loss 
or attacks against private networks, 
many Web server administrators rely 
on FTP to post content to their Web 


servers,” said Jim Magdych, manager of 


the emergency response team at PGP. 
“These vulnerabilities could offer an 


Du Pont IT Exec 
Quits to Be CEO 


BY TODD R. WEISS 
Du Pont Co. lost its chief IT person last 
week when Cinda Hallman announced 
that she was moving to the head of the 
executive table — at another company. 
Hallman, 56, will join Fort Laud- 
erdale, Fla.-based Spherion Corp. as 
its CEO and president. Spherion is a 
staffing, recruiting and IT consulting 
company. 
Hallman resigned as senior vice pres- 
ident of global systems and processes 


easy avenue of approach for an attacker 
intent on defacing Web sites.” 

The CERT Coordination Center at 
Carnegie Mellon University in Pitts- 
burgh also posted a notice on its Web 
FTP flaw. The buffer 
management flaw could let intruders 
execute arbitrary code on an FTP serv- 


site about the 


er and “may be confused with a related 
denial-of-service problem,” CERT said. 

PGP said that until patches are avail- 
able, remote intrusions can be prevent- 
ed by ensuring that no directories exist 
that can be written to by an anonymous 
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PGP Security said that the following 
versions of Unix include vulnerable 
FTP daemons that could be used to 
exploit the globbing flaw: 
> Hewlett-Packard Co.’s HP-UX 11 
> Silicon Graphics Inc.’s Irix 6.5.x 


» Sun Microsystems Inc.’s Solaris 8 
FreeBSD 4.2, OpenBSD 
2.8 and NetBSD 1.5 

aac ae al actin 
FTP user. BSD and Irix users should 
also be sure that none of their FTP di- 
rectories have names with more than 


| eight characters, the company said. 


However, PGP noted, neither of those 
precautions will stop local users. D 


| Margret Johnston and James Niccolai 


of the IDG News Service contributed 
to this report. 


Open-Source Web Site Shuts Down 


Collaboration wasn’t 
enough, says CollabNet 


BY TODD R. WEISS 
After spending 20 months trying to use 
the Internet to bring together corporate 
IT workers and open-source software 
developers to collaborate on technolo- 
gy projects, CollabNet Inc. has shut 
down its SourceXchange online mar- 
ketplace because of a lack of revenue. 
CollabNet co-founder Brian Behlen- 
dorf said in a statement posted on the 
company’s Web that Source- 
Xchange closed April 6. “While a 
unique idea, and one that we feel really 
adhered more closely to the open- 
source ideal than any other work-for- 
hire site ever did, it simply did not 


site 


at Wilmington, Del.- 
based Du Pont, where 
she was responsible 
for the company’s 
global IT systems and 
strategy. Her 35 years 
of IT experience in- 
cludes time spent at 
Houston-based 
Inc., which was 
formerly a subsidiary 
of Du Pont. 

At Du Pont, Hallman was credited 
with saving the company more than 
$550 million in expenses as CIO before 
being appointed as global vice presi- 
dent of integrated processes and sys- 
tems four years ago. She was later pro- 
moted to senior vice president. D 


HALLMAN: 
Saved Du Pont 
$550 million in 
expenses as CIO 


Con- 


oco 


achieve the volume of business neces- 
sary to maintain the site and evolve the 
offering to meet the needs of sponsors 
and developers,” said Behlendorf, who 
helped create the Apache Web server. 

SourceXchange was one of several 
new Internet-based marketplaces that 
let companies post proposals for open- 
source software projects and seek bids 
from programmers. San _ Francisco- 
based CollabNet launched the site in 
1999 and then raised $35 million in 
funding last June from a group of nine 
technology vendors, including Hew- 
lett-Packard Co., Intel Corp., Oracle 
Corp. and Sun Microsystems Inc. 

But a CollabNet spokeswoman last 
week said the company began shifting 
its focus away from SourceXchange last 
fall in order to give full attention to a 
collaborative software package called 
SourceCast, which was used to run the 
online marketplace. 

The big problem was that many com- 
panies preferred to seek application de- 
velopment help from known entities 
with whom they had already estab- 
lished working relationships, said Bernie 
Mills, vice president of marketing at 
CollabNet. “The model they wanted to 
use was the model of a trusted contrac- 
tor,” rather than canvassing an online 
collaborative site Source- 
Xchange, Mills said. 

Tracy Corbo, an analyst at Hurwitz 
Group Inc. in Framingham, Mass., said 
she was surprised by the site’s closure, 
since the softening economy makes it 
more likely that companies will seek 
outside project help instead of hiring 
new workers. “Maybe it was a case of 
being too early to market,” she said. D 


such as 





They say, in e-business, it takes forever to unify the past with the future. 


Some e-business consultants will tell you 
trying to integrate your legacy systems 
takes too long and costs too much. They 
would have you scrap what exists and 
commit to whatever vision of the future 
they’re selling that day. Unisys people 
can unify what you have with what you’re 
going to need, using our decades of 
experience, ingenuity, and plain old 

hard work. And we do it every day, in 
over 100 countries. Today is the day to 
start unifying your past with the future. 
With Unisys people there to help, it 

won't take forever. Visit our website at 


www.aheadforebusiness.com. 
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Microsoft Pulls Bluetooth Support 
From Windows XP Operating System 


Pocket PC division will 
roll out technology slowly 


BY BOB BREWIN 
The desktop division of 
Corp. has temporarily pulled support 
for Bluetooth wireless 
devices from the next version of its 
Windows operating system, citing a 
lack of hardware to test on and a long 
rollout schedule. However, the com- 
pany’s Pocket PC division continues to 
embrace the technology. 

Analysts said Microsoft’s decision re- | 
flects the realities of Bluetooth, which | 
was hyped last year as the next big | 
thing but began shipping in 
quantity only this year. 

Bluetooth uses low-pow- 


Microsoft 


short-range 


er wireless technology op- 
erating in the 2.4-GHz band 
to connect personal digital 


Pains 


assistants such as Palm Inc. 


cellular phones and as a 
replacement for printer ca- 
bles in desktop computers. 
“There is just not sufficient 
quantities of 
quality 
Microsoft spokesman said. 

He said this 


production 
hardware yet,” a 


doesn’t _ next year 


GlaxoSmithKline | 


doins Others in 
Opting for Notes 


BY JENNIFER DISABATINO 
Following similar announcements from | 
newly merged companies, including | 
Exxon Mobil Corp., GlaxoSmithKline | 
PLC (GSK) has decided to standardize | 
its e-mail and collaboration system on | 
Lotus Development Corp.'s Domino 
and Notes. 

The London-based pharmaceutical | 
company informed its employees of the 
migration to Notes in a memo. 

“(The corporate executive team] has 
endorsed IT’s recommendation that 
the best way to achieve a single e-mail 
system for GSK that also encourages 
collaborative working is to adopt Lotus 
Notes. This decision also recognizes 
the substantial number of GSK [re- 
search and development] databases 
that already exist in Notes and are 





Teething 


® Microsoft's desktop division 
devices and Pocket PCs to _ has dropped support for Blue 


tooth in Windows XP. 


® Availability of third-party 
drivers will mitigate lack of 
support for Bluetooth in XP. 
® The Pocket PC division views 2 
Bluetooth as “real” but doesn't Said. “I don’t see wide- 


expect widespread use until 


mean that Microsoft, one of the leaders 
of the industry consortium developing 
Bluetooth, has given up on the technol- 
ogy. The company will consider adding 
support for Bluetooth as production of 
ramps up. Third-party 
software developers will also produce 
drivers to tie Bluetooth devices into 
Windows XP, the spokesman added. 

A manager in Microsoft’s Pocket PC 
division said he believes Bluetooth can 


the devices 


provide real utility for mobile users as 
a cable replacement but that Bluetooth 
isn’t quite ready for prime time. 

“Bluetooth is real, but I don’t think 
{the rollout] will be smooth sailing,” 
said Douglas Dedo, group product 
manager at Microsoft’s mobile devices 
division. Dedo said he 
doesn’t expect to see wide- 
spread proliferation of 
Bluetooth devices until 
next year. 

Craig Mathias, an analyst 
at Farpoint Group in Ash- 
land, Mass., said Microsoft’s 
decision not to support 
Bluetooth in XP reflects the 
realities of the marketplace. 
“There’s lack of standard- 
ization and products,” he 


spread Bluetooth use for 
another two years.” D 


essential to ongoing drug discovery and 
development programs,” the memo 
stated. 

GlaxoSmithKline spokesman Philip 
Connolly said the company’s heavy in- 


| vestment in Notes was a primary factor 


in the decision. 
The decision to standardize came in 
February, two months after the formal 


| merger of Philadelphia-based Smith- 
| Kline Beecham Corp. and London- 


based Glaxo Wellcome Inc. 

The company has more than 100,000 
employees worldwide. While Smith- 
Kline Beecham has substantially migrat- 
ed to Notes, there are still a few other 
e-mail clients in use at Glaxo Wellcome. 

“The possibility of continuing with 
some sort of hybrid between Microsoft 
Outlook and Notes was considered but 
discarded as impracticable,” the memo 
said. “Instead, Lotus Notes Release 5 
will be implemented throughout GSK, 
and Notes Version 4 [currently the 
predominant e-mail system at Smith- 
Kline Beecham], CC:Mail and Outlook 
will be retired. The implementation 
team is being set up and hopes to 
complete the initial planning phase by 
July 2001.” 3 
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NEWS 


CRM Market Appears 
Headed for Shakeout 


Analysts: Mergers, acquisitions to accelerate 


BY MARC L. SONGINI 
AST WEEK’S MERGER 


of ailing Kana Com- | 
munications Ine. | 
with Broadbase Soft- | 
may be | 


ware Inc. 
just the latest sign of an accel- 
erating shakeout in the custo- 
mer relationship management 
(CRM) market, 
analysts. 


The softening economy and | 


the proliferation of smaller 


players has made the field ripe | 
for consolidation or downsiz- | 
As a result, | 


ing, say analysts. 
users of software 
City, Calif.-base 


from Red- 


wood 


Broadbase, as well as the dozen 
other CRM that 
have recently merged, may be 
left to face discontinued prod- 
uct lines and confusion. 

those who are con- 
cerned, there are steps that can 
be taken, said Steve Bonadio, 


companies 


For 


an analyst at Meta Group Inc. | 
in Stamford, Conn. A company | 
should demand a contingency 


contract from a CRM vendor 


stipulating that in the case ofa | 


merger or bankruptcy, the user 
can get access to the applica 
tion source code for 
modification, he said. 


Not all users are worried, 
is | 
however. The Kana/Broadbase 


merger just means business as 
usual, 
spokeswoman for San Francis- 
co-based clothing retailer The 
Gap Inc. 

“We have no concerns and 
have plans to continue our re- 
lationship with Kana,” she said. 

Some users might even ben- 
efit as a result of their vendors 
expanding and _ integrating 
their product lines. 

“By combining the data and 
capabilities into one enter- 
prisewide system, Chordiant is 
providing us with a more effec- 
tive tool to manage our re- 
sources [and] retain and better 
serve our customers,” said Steve 
North, head of strategy and ar- 
chitecture at Edinburgh-based 
The Royal Bank of Scotland 
Group PLC, a user of software 


according to | 


Kana | 
and Menlo Park, Calif.-based | 


Cingular CEO 


| Says location-based 


future | 


said Stacy Maclean, a | 





| from Chordiant Software Inc. | 
Cupertino, Calif.-based Chord- | 
iant recently acquired Boston- | 
| the CRM market include the 
| following: 


based PrimeResponse Inc. 
Kana claims that the merger 
with Broadbase will result in a 


management functions and 
Broadbase’s analytical tools. 
Despite the lofty rhetoric, 


the deal seems like a defensive | 


move, said analysts. Kana last | 
. | mFirePond Inc.acquired 


month laid off 20% of its work- 
force, and when the 


services are among 
carriers’ challenges 


At the Roam wireless tech- 
nology conference in Tucson, 
Ariz., , Stephen Carter, 


last week 


| CEO of Atlanta-based Cingular 


Wireless, discussed with Com- 
puterworld’s Don 


some of the issues wireless 


carriers are facing and what | 

they mean for IT in the enter- | 

| e 
customize. 


prise world. 


Q: Is there a business case for 


third-generation (3G) wireless ser- | 


vices in the enterprise? What can’t 
we do now that we need 36 to help 
us do? 

A: It will make the road war- 
rior’s life a lot easier, since 
the device will dial straight 
through into your intranet. 
You'll be able to utilize a much 
wider array of applications, 
like downloading slides for 
presentations. 


Q: I can do that on my laptop in the 
hotel. Why do I need to do it with 
my wireless device? 

A: Why do you need a wireless 
phone, when you could go to a 
pay phone? It’s convenience. It 


merger | 
was announced, both Kana’s | 
and Broadbase’s stocks were | 


| enterprise 


Tennant | 


| Q: The Federal Commu- 





JUST THE FACTS 


'CRM Market 
Consolidation 


Some recent activities in 


; | =Broadbase Software acquired 
more rounded product line, | 


| with Kana’s communications 


ServiceSoft Technologies Inc. 


| = Kana Communications merged 


with Broadbase. 

= Chordiant Software acquired 
PrimeResponse. 
Brightware Inc. 


Siebel Systems Inc. acquired 
Janna Systems Inc. 


| Group Inc., 

Gaithersburg, Md. A survey of 
| 137 companies indicated that 
| 88% are using or thinking of 
| using CRM systems. 


trading for approximately $1. 
“This merger was a total bal- 


ance sheet and customer ac- | 


' Former FedEx C10 


| quisition play that does little to 
strengthen Broadbase’s previ- 
ously focused strategy,” said 
Bill Chambers, principal ana- 
| lyst at Doculabs Inc., a re- 


search firm in Chicago. 


Despite the turbulent mar- 


| ket, CRM remains a high prior- 


ity for many firms, according 
to recent findings by Intellor 
an analysis firm in 


But consolidation appears 


inevitable for most small and | 


midsize CRM _ players, said 


Joanie Rufo, a research direc- 
| tor at AMR Research Inc. in 
| Boston. “Of 
| CRM vendors in the market to- 
| day, by 
| decade, only 15% will still be 


the nearly 500 


the middle of this 


recognized as viable CRM 
providers,” she said. D 


arter Takes on 36 Wireless 


gives you control over when 
You know 
how 


and how you do it. 
the speed; 
much it’s going to cost you. 

In hotels and other public 
places, 
sured of knowing that you can 
do it at a certain time. And the 
will 
benefits from being 
able to create appli- 
cations that are spe- 
cific to the enterprise 
rather than using 
generic models — the 
ability to tailor and 


you know 


you're not really as- 


see 


nications Commission 
has set an October 
deadline for carriers to 
support location-based 


| services, which would enable au- 


thorities to pinpoint the location of 
911 callers. Will Cingular be ready? 
A: We're still working on exact- 
ly what is the best way to try to 
approach this. There are sever- 
al competing technologies, 
none of which seems to really 
meet the FCC’s specific dis- 
tance and accuracy require- 
ments at this point. The hand- 
set manufacturers have defi- 
nitely got a challenge to meet 
the requirements, and the car- 
riers have a challenge with the 


| A: Neither we 
| else has enough to do 3G in 


CARTER: “I don’t 
believe that the 
U.S. has enough 
spectrum.” 


infrastructure. So we're still 
wrestling with this at the mo- 


ment. 


Q: Do you have the spectrum you 
need to support 3G? 
nor anybody 


the European sense. 
The Big Six carriers 
in the U.S. — we all 


have an average of 


somewhere between 
25 MHz and 35 MHz. 
If you look at Eu- 
rope, the big carri- 
ers there’ have 
about 90 MHz. Japan 
is about the same. So 
I don’t believe that 


spectrum. 


| Q: What’s the optimum solution to 
that problem? 


A: I’m not convinced that you 
six huge carriers to get a | 
good, competitive market go- | 
ing. But truthfully, there needs | 
| to be more spectrum available. 


need 


So that means you have to cut 


out some blocks that are us- | 


able and, ideally, compatible 
with a world standard so you 


don’t end up having stuff made | 


just for the U.S. I wouldn't ar- 


gue that it should be free, but it | 


should be certain. D 


the U.S. has enough | 


Joins Commerce One 


Business-to-business software 
vendor Commerce One Inc., which 
warned earlier this month about 
weak financial results for the first 
quarter, has named Dennis Jones, 
former CIO at Memphis-based 
FedEx Corp., as its chief operating 
officer and vice chairman. Jones 
will be responsible for engineering, 
marketing, financial, legal and 
administrative operations at the 
Pleasanton, Calif.-based company. 


More Movement 
At Critical Path 


Another reorganization at e-mail 
outsourcer Critical Path Inc. last 
week resulted in the layoff of 450 
employees, including the president 
and six other executives. In Febru- 
ary, San Francisco-based Critical 
Path restated its earnings for the 
previous quarter as a result of an 
investigation that detected some 
revenue problems. 


Microsoft Expands 
On Unit Shifts. . . 


Microsoft Corp. has fine-turied previ- 
ously announced internal organiza- 
tional changes aimed at advancing 
its move toward software services. 
Vice President Yusuf Mehdi will lead 
the newly expanded MSN & Personal 
Services Business Group, responsi- 
ble for network programming, busi- 
ness development, and sales and 
marketing for Microsoft's software 
services. Group Vice President Bob 
Muglia’s .Net Services Group has 
been renamed the Personal Services 
Group and has been expanded to 
include a Personal.Net team to de- 
velop premium subscription services. 


.. . And Finalizes 
Great Plains Buy 


Microsoft has completed its acquisi- 


| tion of Fargo, N.D.-based Great 


Plains Software Inc. for approxi- 
mately $1.1 billion in stock. Great 
Plains, which makes business appli- 
cations for small and midsize com- 
panies, will become a division oper- 
ating within Microsoft's Productivity 
and Business Services Group. 
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PATRICIA KEEFE 


Regulate Privacy 


HONE NUMBER? ZIP CODE? Social Security number? You 
can’t make a purchase or fill out a form these days without 
being asked such intrusive questions. Then there’s the 
blackmail practiced by retailers that forces you to choose 
between paying too much or surrendering your shopping 


habits to a swipe card. Or pick up a 
prescription and get automatically 
funneled into “informational” cam- 
paigns from drug makers. 

No wonder Capitol Hill is crawl- 
ing with privacy bills. But those ef- 
forts won't amount to much if folks 
like House Majority Leader Dick 
Armey (R-Texas) and his sidekick, 
Rep. WJ. “Billy” Tauzin, (R-La.), 
chairman of the House Committee 
on Energy and Commerce, have 
their way. Both men are using lax 
government agency follow-through 
on privacy as an excuse to shield 
businesses, which they claim can be trusted to 
safeguard privacy rights without regulations. 

Who are these trusted companies? EBay and 
Amazon? They recently changed their privacy 
policies to exempt themselves in the event of a 
buyout or bankruptcy (in which case, they’d 
like to treat your privacy as a salable asset). Or 
maybe it’s the members of the Online Privacy 
Alliance — AOL, Microsoft, IBM and Sun, 
among others — which are said to be quietly 
lobbying to kill or weaken privacy legislation 
that’s now under debate. (See, Judge Jackson, 
they can set aside their differences and come 
together when the cause is great enough!) Or 
perhaps it’s our financial institutions, which 


PATRICIA KEEFE /s 
Computerworld's 
editorial director. Contact 
her at patricia_keefe@ 
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have been given obscene license to 
share our personal data within and 
outside their umbrella companies. 
Many are already violating the spirit 
of the law that requires them to no- 
tify consumers of their remaining 
privacy rights. 

And don’t forget the 751 U.S. and 
international sites surveyed by Lon- 
don-based Consumers International, 
which found that while most collect 
personal data, they don’t tell con- 
sumers how it will be used or se- 
cured or what rights they have. 

Clearly, the fox is in the henhouse. 
If customer relationships are really what will 


alone will make customers “feel more comfort- 
able” is dishonest. Knowing what happens to 


| your data isn’t the same as a buy-in, and that’s 

| the real issue here. Comfort will come from the 
| ability to protect and control the collection and 
| distribution of that data without suffering 


penalties. Businesses that really want to build 


| e-relationships need to get behind a win-win 
| privacy solution that works for all parties. 

| That’s where the relationship rubber really 

| meets the road. D 


et OLEel 


SECURITY PROJECTS. 
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PIMM FOX 


Wall Street Woes 


Can Hit Corporate 


IT Where It Hurts 


ANIC NOW AND avoid the rush. 

No, this isn’t IT policy, but it sums 

up Wall Street. Just when investors 
believed stocks could go no lower, they 


found deeper ground to plow. Sure, some 
politicians and economists make the case that Wall 


| Street isn’t connected to Main Street, but they ob- 


viously don’t work at publicly traded firms. 
There are work-related reasons for IT profes- 


| sionals to watch the stock market. 


First, they buy from vendors whose stocks are 


| getting hammered. Top-notch technology is no 


guarantee of success. What counts are profits. If 
you’re doing business with a firm that doesn’t 


| have any profits, ask why 
| it doesn’t. A couple of los- 
| ing quarters in this market 


could spell disaster. Con- 
sider that PSINet, an Inter- 
net access provider, 


: ; | warned that it would likely 
| drive businesses for the next decade, then com- | 
| panies need to stop fighting privacy legislation. 
| The idea that “better education and disclosure” 


| face bankruptcy. If you 


think this isn’t going to af- 
fect you, think again. The 
ripples from a tech melt- 
down will hurt everyone. 
Winstar Communica- 
tions, which has borrowed 
$600 million from Lucent, 
is on the ropes. Winstar can’t pay its bills and is 
considering bankruptcy protection. This could 
further damage Lucent, which has denied rumors 
that it also would seek bankruptcy protection. 
As a technology buyer, you must perform due 


PIMM FOX is 
Computerworld’s West 
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diligence on the companies you deal with. Tell 


them it’s not personal — just good business. 
A second type of due diligence applies directly 
to vendors’ research and development. For much 


| of the past five years, the bull market has given 


tech companies the opportunity to use their own 
stock to acquire new, emerging companies, sup- 


| plementing their own R&D efforts. 


Back in the good old days of 1999, Cisco Sys- 


| tems paid $6.9 billion in stock for Cerant Corp., a 


maker of fiber-optic networking equipment that 
had yet to book any significant sales. At the time, 
Cisco’s stock was about $30 per share; today, it 


| trades at less than $15, halving its buying power in 


the stock-swap market. So Cisco, which defined 
the strategy of high-tech takeovers to help move 
into new networking arenas, recently announced 
that it would curtail purchases. 

Check your vendors’ R&D efforts. Are they 
homegrown? Or did a high-flying stock price let it 
buy innovation? 

Falling stock prices don’t just thwart R&D 
takeover strategies; they also scuttle deals to ex- 
tend a company’s marketplace. 
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Enabling E-business with 
Business Information 
Management 


rmath 
purpose 


struct peop 


just tor its own 


to inform and to in 


take actions. In the case of 


siness information, these are actions 


tion a 


it spans from pla 


uest for delivery of t 

Or it could go from the request for 

a supplier's price quotation to its 
payment; from the specification of 
the sign require 


ments to the product 


Sos 
TS UF Ae 
GU Fe BEG 

Corp. 


documentation; from 
the worker's original 
application for em 
ployment to the sum 
mary of the employ 
ee’s retirement op 
tions. All this information needs to 
be passed along in a chain that goes 


from “actor” to “actor” to be utilized 


> product « 


cing the customer's orde rto 


"Service 


as and when it is needed 

In most organizations, each step is 
executed by different business de 
partments that are often in different 
locations or by partners and suppli 
ers that may all be running different 
business applications and on differ 
ent computing platforms 

At any point along this chain there 
is rarely any shortage of information 
The problem has usually been one of 
ensuring that the right information 
gets to the right person at the right 


time. This is why many different de 


livery mechanisms have evolved to 
meet a specific combination of re 
quirements for accuracy, quality 
timeliness, mobility and economy. In 
formation is put on pieces of paper 
copied and hand delivered, sent by 
internal or external mail and even 
pushed through pneumatic tubes. In 
formation from the original pieces of 

may even be transcribed, dic 
ated over the telephone or faxed 
ven computer-generated informa 
tion is frequently printed and then 
copied and either faxed or delivered 
To this has been added such newer 
delivery media as email messages, al 
phanumeric pagers, cell phones and 
other personal devices such as the 


Palm Pilot 


Internal Business Benefits 
Business benefits accrue froma va 
riety of sources whenever businesses 
implement even simple examples of 
business information management 
Many of these directly benefit both 
the information producers and con 
sumers and permit them to do their 
job better and more efficiently. For 


example, information producers do 
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not have to waste time re-formatting 
or copying the information and fi 
ing ways to deliver it 
have to go looking for neec 
mation — it comes to them 

Other benefits are more intangible 


such as the following: Timely infor 


a URL a 
the percentage savings you have 
experienced from your business 
information solution? 


rol Ee 
geet) 


Me mae 
of paper 


Lower cost of 
running printers 


Rey Tm a 
Ty OME 
Milas 


Lower cost of 
printer maintenance 


eT MRM Cott lky 


Stale) [e Se Bes ire mee eee 
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mation distribution, customer ser\ 
ice, service requirements and deliv 


ery of business- critical information 


Timely Information Distribution 
When information such as ac 
counting, stock and sales reports can 


be delivered more quickly to the ap 


propriate decision makers, these con 


sumers of the information may react 
more speedily and effectively to 


changing business conditions 


Faster Access to Information 
Similarly, by routing information 

straight to consumers in remote loca 

tions such as branch offices, these 


“customers” are now able to have ac 
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cess to important business data earli 
than they would by n 

processes such as faxes or snail ma 
Tailoring Information to Individuals 

\ complete solution 
format and personalize the infort 
tion for each type of user. W 
formation output is more e 
tailored in format and medium to the 
needs of each individual, then this 
in effect provi easier access to 
the information. This significantly 
improves the e 
ness-unit management 
Better Customer Service 

If information can be ro 
accessible across the company, for ex 
umple, to a Web server, then staff can 

sadily access it from anywh 
needed to serve the customer 

But, in addition to this are two 
benefits that accrue to the IT manag 
er or CIO that implements business 
information management. These t 
benefits include: Internal-Service 
Requirements and Business. Critical 
Information 
|. Internal-Service Requirements: M 
IT operations are now expected by 
business management to commit to 
specific service levels, and frequently 
compensation (and even job tenure) 
is dependent on meeting them. At 
solution that eases the process of 
moving information around the com 
pany and makes this more reliab 
helps to enable IT to meet these ser\ 
ice lev 

Business-Critical Information: This is 
an information producer-driven ben 


efit. For what is the value of produc 
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ing information if there is no assur 
ince that it will get to the intended 
consun 

Inasurvey, IDC asked respondents 
to rate these business values in terms 
of a value of | for “no perceived value” 
to a value of 10 for “maximum per 
ceived value.” Assurance of delivery 


est rated value 


Conclusion 

Today's business depends as much 
on the information supply chain as 
does on the new ir ated manufac 
turing supply chain. Just as there is 
new software to support this manu 
facturing supply chain, there needs 
to be software to manage the flow of 
business informatior yng this 
chain. This information needs to be 
in many forms and on many different 

edia types, from simple printed r 
ports to faxes, email, Web pages and 
wireless pagers. E-business solutions 
ire not being created rapidly enough 
ind are not sufficiently comprehen 
sive to make much of an impression 
on this problem. We need a general 
purpose system service that can be 
utilized in any environment and in 
any organization which can perform 


this integration. * 


a 
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BMC Software's Business 
Information Solution saves time, 
money and provides better 
customer service 


Frontier experiences immediate business benefits by bringing sales 
report generation time down from 14 to 16 days to several minutes 


cki says. “All the resources were right 
there. Any questions you had, they 
had {answered by] an expert right 
iway 
ster, N.Y.-b | I Kenyon says the slow turnaround BMC’s approach to answering 
tier Communicatic p.,a Glo hreatened to ite a morale prob questions and offering up-front serv 
Crossing company lem: “Any 1 sales really likes to ices,” made the company stand out 
Frontier, a lecommun n know what their commission is,” h Kenyon agrees. “You really felt like 
ind Internet service provider INTs OL utes took too long to you were partnering with someone 
| telephone companies in le, too. Marl cicki, a Frontier Moscicki says the installation and 
The company generates munications developer, says if a integration of CONTROL-D were 
ports for all its sales sales rep had questions about a com painless. Frontier runs an IBM 
representatives at headquarters. Un ) he forced to fill out apa OS/390 mainframe. Access security is 
wdit request handled by Computer Associates 
nting and sh pping Ot uil it idquatr CA Top Secret 
boxes of reports a month ters. Weeks might pass At Frontier, it was vital that CON 
Once they arrived at sales before questions were TROL-D work smoothly with Top 
offices, the cartons of re settled Secret so that salespeople could ac 
rts still had to be bro Last year, whe P cess their own commission records 
ken down and delivered tier decided to solve the while managers could view the 
As aresult, “( problem, a team led by records of all their direct reports 
a salesperson was waiting 14 to 16 Kenyon and project lead Mike Miller Moscicki says there were no integra 
days for their report ws Dennis chose BMC Software’s CONTROI tion problems with the products 
Kenyon, Frontier's director of IT op D® business information manage Next Frontier turned to the desk 
erations. Employees dubbed the slow ment software top level. Here, BMC Software's 


setup the “Pony I oreovel MC was by far the best,” Mosci CONTROL D/PC allows platform 
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ompany eliminate 
associated st 


Fronti proje 


2000 the company also saved 
on report 1eration ¢ 
) boxes of paper 
op priority 
turnaround time. It’s an understate 


1 ‘ 
success: The I4 to 
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their commission reports 
reduced to minutes 

the job ends, the 

there,” Moscicki 

TROL-D/P¢ und 


WebdAccess Server, over 1,200 sales 


reports 
I 
Using CON 


CONTROL-D 


Savs 


people use the system, with no access 


problems or network degradation 


Frontier reports 


business advantages. Sales ag 


ind managers can now easily 
month-to-month 


comparisons 


commission data, whic 


spot trends faster. And 
TROL-D 


ystem can De customiz 


u lly Call attention to signi 


t numbers or percentages 
\lso, Moscicki says, if a salesper 
has a question on a commission 
they can expedite an audit.” CON 


TROL-D/WebAccess_ Server lets 


users attach an electronic note to 


their report and route it back to 
idquarters instantaneously 
commission disputes are 
ckly 
That makes for a happy, produc 


Miller 


says feedback from the sales force is 


Thus, 


resolv ed 


tive sales force. Frontier’s 


y positive” and adds that while 
s happiness is “hard to put a value 


he company. * 


it is critical fo 


Brown-Forman streamlines sales, forecast and payroll 
reports to give users more flexibility and customization 


' 

late 1800s, whisky was 
mostly sold in rels, a method 
that did not always result in 
gh-quality spirits. In order to sell 
icinal 
| 


1 young pharmaceutical 


top- grade whisky that met mec 
standards 
salesman named George Garvin 
Brown had the brilliant idea of pack 
aging whisky in sealed glass bottles 
He invested $5,500 dollars, which to 
day has blossomed into a $2.1 billion 
company with 7,400 employees in the 
U.S. and abroad 

Today this company is known as 
Brown-Forman Corp. and the pack 
aging of whisky was key to its early 
success in its founding year of 1870 
But 130 years later, it was the packag 
ing of business reports that spurred a 
successful cost-savings strategy at 
the Louisville, Kentucky, firm 

Brown's brand of innovative think 


ing has led Brown-Forman to many 


successes in its long history 
the implementation of a time 
t-saving software 

from BMC Software the leader in 
livering the most comprehensive 
business system man 
yement software 

Iwo years 
when a sales report 
forecast or payroll re 
port had to be dis 
tributed to a business 
division, it meant 
printing out and then 
mailing thousands of 

ges to hundreds of 
people around the world. “We have a 
lot of distributed locations and peo 
ple who need different reports in dif 
ferent parts of the world,” says Rob 
Evelyn, technology engineer and con 
sultant at the firm 


Reports are generated from the 


“We've seen cost savings 
in printed paper and 
time.” 


company’s enterprise resource plan 


ning. human resources and manufac 


g resources planning systems, 

ull of which are based on software 

n SAP. They are also generated 

from legacy systems 

ind systems devel 
oped in-house 

To cut costs ar 


give more peop 


easy access [to key 
~ Rob Evelyn 
technology engineer 
and consultant, 


Brown-Forman 


business informa 


tion, Brown-Forman 
decided to imple 
BMC _ Soft 

INCON 
TROL™ business information solu 
CONTROL-D 


automates report-handling tasks for 


ment 
ware s 


tions. TI product 


OS/390 systems, including report 
creation, breakdown, storage, view 
ing and delivery. At Brown-Forman, 


CONTROLD electronically distrib 
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utes the company’s printed output 
for its business- supporting systems 
Today, instead of leafing through 
thick sheaf of papers that arrive days 
after the report was printed, business 
users can access reports immediately 
via the Internet or Brown-Forman’s 
intranet and print them locally if they 
so choose. The reports are stored on 
the CONTROL-D ver, converted 
to HTML and placed on the Internet 
This ha 


by eliminating the need for people t« 


xade distribution easier 


send printed reports through the 
mail,” Evelyn says. “We've seen cost 
savings in printed paper and time 
Also, there used to be many high 
level senior executives and lowe 
el line workers who didn't use SAP ot 
a regular basis and didn't always get 
to see sales forecasts, or they 
request a print-out. With the CON 


TROL-D system, “they don't require 
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ion anymore,” Evelyn says 
3rown- Forman has been running 
system for more than two years 
| considered a num 
produc but 
CONTROL-D offered greater uset 
xibility. “We have some users who 
want the ability to take a report in 
olumn format Sort it to Ex 

Evelyn e Also, users C€ 
customize the reports; for instance, if 
they don't want the first five columns 
in the report, they can move the sixth 
column to the ginning. “No other 
products allowed that functionality 

it the time,” Evelyn says 

Brown-Forman is using several of 
BMC Software’s INCONTROL mod 
ules, including CONTROL-V®, for 
users to create a scalable electronic 
document archive on the OS/390 
CONTROL-D/PC, tor 


nl rT } 
| latiorm a 


Windows NT-based desktop users 


Business information management for 
greater customer service via the Web 


For Swedbank, putting documents online means quicker access to information, 
better security and very happy partners, customers and employees. 


t’s more than 900 miles from one 
end of Sweden to the other 
That’s a long way to scatter the 
near 700 branches of Forenin sopal 
banken (known internationally as 
Swedbank) and a long way to ship 
millions of pages of paper documents 
each month from its headquarters in 
Stockholm 
Putting those paper reports online 
would not only save vast sums in 
transportation, but also g local 
bank managers more timely and in 


depth information about the state of 


their businesses. That’s why in Feb 
ruary, 1997, Swedbank went to online 
ad retrieval of internal re 
locuments which the 
bank would store for its own use, 
continuing to print only the state 
ments and documents it must send to 
its 4.4 million customers 
But it’s no small chore to efficiently 
store millions of documents, and pro 
vide easy access to them for the 
bank’s 14,000 employees — especial 
ly when some documents must 


kept 60 years for legal or regulatory 


lownload, store, view, edit and 
print reports. As for the users, “they 
really like it,” Evelyn s ‘It just 
makes it easy for them to get data 
they were never able to get before 
\ top business executives are 
thrilled with the cost savings and 
bili ) distribute one report to 
many people at the same time 
That’s just a big thing to us,” Evelyn 
says. “We've got 7,800 employees, and 
about 500 of them are using INCON 
TROL right now.” * 


INCONTROL™ for Business 
Information Management 
Email ControlD INCONTROL@bmc.com or call 
(800) 811-6763 to get a free demo CD 
that will show you how to manage your 
business information quickly and reliably 
throughout your enterprise. 


<bmc 


Assuring Business Availability” 


reasons, and when employees need 
the ability to comment on reports 
That’s why the bank has BMC 

Software’s INCONTROL™ business 
information management solutions 
to track, manage and retrieve digital 
documents that total six terabytes of 
data — and growing. Another bene 
fit of BMC Software's business infor 
mation management tools is deliv 
ing information to internal employ 
ees, external customers and partners 
via the Web while delivering high 


quality service-level management 
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And the cost-savings and speed 
made BMC Software's business in 
formation management 
ingly valuab rt of Swedbank’s IT 
infrastructure 

For Swedbank, the solution in 
C luded, CONTRO! 
D®/WebAccess 
Server that allows 

b share 
documents via the 
Internet or in 
tranets. The bank al 
so uses the CON 
TROL-D/Page On 
Demand Toolkit, a 
software  develoy — 
ment kit for creating custom applica 
tions by using the page-on-demand 
protocol, for indexing, searching and 
retrieving documents 

The business information mar 
ment tools allow information to be 
accessed through the Web quickly 
and securely while reducing the ex 
pensive process of physically distr 
uting documents, and speeding the 
decision-making throughout tl 
bank, says senior system programmer 
Per Norburg. 

In 1996, Norburg says, the bank de 
cided to go to online storage and doc 
ument access, except for “the state 
ments we have to deliver to cus 
tomers. We wanted to cut down the 
cost of distribution by air” of paper 
reports to the 1,200 branches the 
bank then maintained across the 
country. The bank purchased CON 
TROL-V® as the platform for a scala 
ble electronic document archive on 
the mainframe 

A critical feature for the bank was 
to allow users to enter notes into on 
line reports. “If [users] have to take 


“Our end users wanted a 
system where they could 
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action on something within a r 
or something is wror 

make a ind send it tot 

in that division or that branch 
further action, Norburg says 
note, along with a date stamp an 
ID of the 
who inserted 
will b 


gether with the 


Store all kinds of files ANd nore as long as 
documents.” 


it is kept w 
CONTRO! 
~ Per Norburg, = Using 


senior system programmer, notes | 


Swedbank =the bank | 
used BMC Soft 
ware’s business information manage 
ment solution as a workflow applica 
tion to automate processes that oth 
erwise would have to be done manu 
-ONTROL, for e 

, a bank controller can receive 
daily list of all the reports a loc 
bank manager should have reviews 
ind instantly see if they have bee 
viewed, rather than having to check 
the paper version of those reports 

The bank has also used CON 
TROL-D to reduce by up to 60% the 
amount of storage space needed to 
archive documents online. Rather 
than send documents from a local 
bank branch to an outside vendor to 
create a bulky scanned image, says 
Norburg, the bank found a way to di 
rectly store ythet t produced by 
mainframe IMS applications in 
CONTROL-D. This requires far less 
space — and expense — than storing 
the entire scanned document. Im 
menting CONTROL-D AND CC 
TROL-V required some coding to 

concile differences amon 


ing ways account numbers had been 


ithin the bank’s existing ap 

itions. “The coding was not so 
hard,” says Norburg, compared with 
acking down all the ways account 


bers might show up in legacy re 


1996, the bank has also been 

CONTROL-D/PC, which al 

lows Microsoft Windows NT desk 

tops to download, store, view, edit 
ind print reports 

Last year the bank began using 
other business information manage 
ment products from BMC Software 

luding CONTROL-D/Image, 
CONTROL-D/WebaAccess Server 
ind the CONTROL-D/Page on 
mand Toolkit. CONTROL-D/Image 
accesses scanned images of docu 
ments or reports, but Norburg has 

en pleasantly surprised by its abili 
ty to store not only text, but also pic 
tures and video. “Our end users 
wanted a system where they could 
store all kinds of files and docu 

nts,” Norburg says. Using CON 
TROL-D/Image, “you just retrieve 
[the file] from the mainframe and it 
will open the right application on the 
workstation.” 

According to Norburg, there have 
been many examples of cost savings 
at the bank. These savings includ 
purchasing much less paper to print 
reports; hiring fewer couriers to 
transport printed reports to the air 
port; and less need to pay for air 
freight. “Also, it’s fast,” he says. In the 
past, “If we prin 1 something Mon 
day morning, they [would] have it at 
the branch Tuesday morning.” Now, 
he says, decision-makers in branch 
offices can see reports as soon as the 
mainframe finishes the batch job that 
produced them. # 
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TOTAL ACCESS AT THE speed 
OF E-BUSINESS 


In the speed-driven world of e, there's no time to waste. With INCONTROL ” for Business 
Information Management by BMC Software, you can easily provide your users with the information 
they need, exactly when they need it. This solution lets you Web-enable any document or report 

so your users have instant access to information, regardless of their location or the location of the 
document. The requested information can also be delivered in many formats. And with the power of 
automation, you can manage your business information easily, 4 

regardless of the size of your enterprise. So you can reduce costs while <4 DMC 

significantly improving your service levels. Assuring Business Availability” 
Ready to see INCONTROL for Business Information Management in 

action? Email ControlD_INCONTROL@bmc.com or call 800 811 6763 to get a free demo CD that 


will show you how to manage your business information quickly and reliably throughout your enterprise. 


Software, the BMC Software logos and all other BMC Software p { OF service names are registered trader ad f BMC Software, Inc. IBM is a registered trademark of International Business Machines 
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The once-vaunted business-to-business e-com- 
merce arena is littered with shredded balance 
sheets, laughable revenue projections and 
scotched deals. In January, Ariba wanted to ab- 
sorb Agile Software, creating a congealed mass of 
collaborative commerce products. Trouble is, B2B 
exchanges withered, and the bears attacked share 
prices like a swarm of locusts on a wheat field. 

Ariba agreed to pay Agile shareholders stock 
worth $2.5 billion. But Ariba’s shares have fallen 
so much that the deal — now canceled — would 
be worth just $500 million. 

The warning is clear: Don’t believe a company’s 
future plans. Wait for the reality. D 


JOHN GANTZ 


A Revolution in 
Servers Is Here 


HERE’S A REVOLUTION going on 

in servers — one that’s easy to 

miss because it’s starting not in 
the enterprise data center but in tele- 
com switching, medical imaging and 
industrial electronics. 

Once, servers was just another name for mid- 
range or mainframe computers, with the major ar- 
chitectural variations relating to an operating sys- 
tem and to the number or processors in a system. 

That’s beginning to change. Servers are migrat- 
ing to more open or standard operating systems 
— such as Windows or Linux — and to more spe- 
cialized use by their functions. Branded general- 
purpose servers first gave way to servers with 
preloaded software, then to hardware optimized 
for workload with the preloaded software. This is 
giving way to hardware and software that’s cus- 
tomized for a particular workload or application, 
also known as “appliance servers.” As if to ratify 
this migration, last year we saw an explosion in 
“rack-optimized” servers or systems such as the 
Sun Netra 220R and 420R 
and the Compaq ProLiant 
DL. In the first quarter of 
last year, rack-optimized 
servers accounted for 15% 
of all entry-level server 
shipments. That doubled 
by the third quarter. 

But that was just the be- 
ginning. This year, we'll 
also see the following: 

w@ Shipments of servers 
based on the InfiniBand 
architecture, which is de- 
signed to replace Peripheral Component Inter- 
connect (PCI) buses. 

w@ New enhanced workload management software 
tor dynamically changing a server’s configuration 
or workload. 

@ New low-power processors that enable server 
rack populations in the hundreds and innovations 
building on these advances 

w Server “blades,” or motherboard computers 
that can be put into subracks and aggregated into 


JOHN GANTZ is a senior 

vice president at IDC in 
Framingham, Mass. Con- 
tact him at jgantz@ide.com. 


| The Real Shortage 
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| larger systems, which are based today on the 
; CPCI, or compact PCI, architecture (See Exec 


Tech, page 56.) 

Picture this: Instead of a single server in your 
data center, you have racks of servers configured 
from numerous server blades, each with its own 


| memory, processor and connection. Each blade 

| . . co, . 

| can be dynamically loaded with software opti- 

| mized for the function of the blade — for example, 


handling e-mail, Internet security or content 
caching. In the morning, you may need six blades 


| to handle your e-mail, but only two after-hours, so 
| the other four can be released for other functions. 


Blades are already in use in telecom, military, 


| medical imaging and industrial applications. Ven- 
| dors include Force Computers, an arm of Solec- 
| tron; Motorola Computer Group; and Ziatech, 


which Intel recently bought. IDC’s server analysts 
expect these vendors to expand their product 


lines first into the Internet infrastructure space — | 


selling to Internet service providers (ISP) that 


support at least 100,000 end users — and then, as 


READERS LETTERS 


shortage of cheap IT 
labor, which isn’t the 
same thing. 

Bob Nolin 

Senior programmer/analyst 
Dick's Sporting Goods 
Bethel Park, Pa. 


Wheeler to represent 
employers who claim 
there is an IT labor 
shortage [“The New Im- 
migration Wave,” Busi- 
ness, March 12]. I’ve 
lived in Pittsburgh for 10 
years and find the IT job 
market very tight, with 
salaries lower than aver- 
age. Employers rarely 
hire outright but hire in- 
stead after a trial period 
as a contractor. Rapi- 
digm, Wheeler’s firm, is 
a major supplier of con- 
tractors. I recently sent 
it a résumé but didn’t re- 
ceive a response, despite 
15 years of experience 
and recent certification 
in Web programming. 

Perhaps it is because 
of that experience and 
training that Rapidigm 
doesn’t return my calls. 
It would prefer to pay 
less for foreign labor. 
Meanwhile, mature, ex- 
perienced IT workers 
such as myself can only 
shake their heads in dis- 
gust at how the govern- 
ment and the press have 
blindly accepted the self- | 
serving propaganda of 
the Information Tech- | 
nology Association of | 
America. | 


FOUND IT ironic that 
you chose Lew 


In the Constitution 


FOUND Patrick Thi- 

[ec article on 

Internet taxes to be 

| quite informative [“On- 
line Retailers Want Sim- 
pler Rules Before Col- 

| lecting Taxes,” Comput- 
erworld.com, March 14]. 

| However, this wording 

| slants the reader to sup- 
port cross-state taxing of 
Internet sales: “Under 
two previous rulings by 
the U.S. Supreme Court, 

| a business isn’t required 

| to collect sales taxes on 
an order unless it has a 

| physical presence in the 
state where the cus- 
tomer is based. State 
governments are trying 

| to get Congress to 
change that restriction, 
fearing that they eventu- 
ally will lose significant 

| sales tax revenue if so- 

called remote sellers 

continue to be given a 

free pass from collecting 

the taxes.” The Supreme 

Court was simply follow- 

ing the Constitution. Ar- 

ticle I, Section 9 states, 


There isn’t a shortage 
of IT labor; there’s a 


E-Commerce Rights 


software improves, into enterprise data centers. 
As these new technologies wend their way 
| from the large networks and ISPs and into the 
rank-and-file data centers, what can you expect? 
First, you can expect a mismatch in the hard- 
| ware capabilities of racks of server blades and the 
software you need to manage and reconfigure 
them dynamically. You may be writing code your- 
self, but then again, you'll have much noticeable 
improvement in your ability to guarantee perfor- 


mance to your end users. 


Second, you’ll need some new skills in tech 
support, maintenance and systems management 


as well as design. 


Finally, if you can’t adapt to these new tech- 
nologies within, say, the next five years, you may 
find your data center outsourced. 

These new technologies will offer those who 
use them flexibility and performance over today’s 


general-purpose servers that are about equal to 


the advantages nuclear submarines have over 
diesel boats. Better dive in. D 


| “No Tax or Duty shall be 
laid on Articles exported 
from any State.” I would- 
n’t call a constitutional 
protection a “free pass.” 
Jeffrey J. Frank 
Instructor 
Comp U Tech Corp 
The Woodlands, Texas 
jeff@computechcorporation.com 


Holier-Than-Thou AOL 


' Shouldn't Cast Stones 


N MY EXPERIENCE, 
AOL servers are the 
source of about half 
of the spam I get [“AOL 
| Spam Filters Block 
E-Mail From EarthLink 
| and Others,” Computer- 
world.com, March 20]. 
This is a case of the pot 
| calling the kettle black. 
| AOL should be fined for 
deliberately losing peo- 
ple’s e-mail, not being 
| able to retrieve it or 
track where it went, and 
| not even notifying 
| senders that their 
| e-mails weren't received. 
| Paul Paetz 
| Netron Inc 
Atlanta 


FRO RE ARE I RE 
| Options for Win 2k 
HE LETTER 
“Thumbs Down 
to Single-User 
OS” [Readers’ Letters, 
| March 12] makes me 
wonder if the user has 


done any research or 
testing regarding Win- 
dows 2000. It is true that 
in Windows NT 4.0, 
most things have to be 
done via a GUI, but 
there are numerous tools 
in Windows 2000 that 
administrators can use 
to bypass using products 
like PCAnywhere. Ter- 
minal Services works 
quite well over a 56K 
dial-up connection and 
there are also a telnet 
server and the remote 
command. Using the re- 
mote command and 
Windows Script Host, I 
can do all of my adminis- 
tration from a command 
line. If this user hasn’t 
explored these services 
in Windows 2000, he is 
wasting his company’s 
money buying PCAny- 
where. 

Ray Collins 

Senior LAN administrator 
Computer Sciences Corp 
LaGrange, Ill 
rcolli23@csc.com 


COMPUTERWORLD welcomes 
comments from its readers 
Letters will be edited for brevity 
and clarity. They should be ad- 
dressed to Jamie Eckle, letters 
editor, Computerworld, PO Box 
9171, 500 Old Connecticut Path, 

| Framingham, Mass. 01701. 

| Fax: (508) 879-4843. internet 

| letters@computerworld.com. 

| Include an address and phone 

| number for immediate verification. 
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POINT OF VIEW 


Agility 

As applied to the computer industry, the con- 
cept of agility takes on a new meaning. 
Working together, Compaq and Microsoft are 
constantly ee embody that concept. 
www.windows2000advantage.com/pov/ 
03-19-01_agility.asp 


= TECH EDGE 


Visual Studio.NET - A platform for Web 
application development 

The Microsoft .NET initiative is rapidly 
taking shape with the growing availability 
of solid services riding on top of 
Microsoft Windows 2000. 
www.windows2000advantage.com/tech_edge/ 
03-12-01_visual_studio.asp 


Boca 


Compag server exec reviews 

market trends 

Hugh Jenkins, director of marketing for 
Compaq's Industry Standard Server 
Group, discusses what users expect from 
their servers and how evolving server 
technology is empowering them. 
www.windows2000advantage.com/qa/ 
03-05-01_market_trends.asp 


COLUMNS 


Windows XP, a.k.a. “Whistler,” impresses 

our reviewer 

the recently unveiled Windows XP, which 
embodies the client-side version of the 
enhanced Microsoft Windows 2000 version 
known as Whistler, offers stability, power, flex- 
ibility and extensibility. 
www.windows2000advantage.com/columns/ 
02-26-01_win_xp.asp 


CASE STUDIES 


RadioShack, Starbucks blazing Commerce 
Server 2000 trail 


Before Microsoft's Commerce Server 2000 
hit the street, it went through an extended 
beta testing trial with top-tier companies. Two 
of them, RadioShack.com and Starbucks used 
it to accomplish specific e-commerce goals. 
www.windows2000advantage.com/ 
case_studies/01-22-01_commerce.asp 


COLUMNS > 


Defining enterprise class: Is Windows 2000 
ready? 


Many different elements comprise true enterprise class comput- 
ing. In order to determine if Microsoft Windows 2000 fits this 
elusive bill, Aberdeen Group's Tom Manter, takes a detailed look 
at Microsoft's efforts to distinguish Windows 2000 among its 
operating system peers. 


For the full story, visit: www.windows2000advantage.com/ 
columns/04-02-01_enterprise_class.asp 


NEWS > 


Windows XP Beta 2, Tablet PC, wireless support 
headline WinHEC 


Recently, Microsoft held its 10th annual Windows Hardware 
Engineering Conference (WinHEC) in Anaheim, Calif. The main 
themes surrounding the conference revolved around the avail- 
ability of Microsoft Windows XP Beta 2, a new device still in 
development called the Tablet PC and wireless technology. 


For the full story, visit: www.windows2000advantage.com/ 
news/04-02-01_xp_beta2.asp 


FEATURES > 


Hardware, application compatibility are critical Windows 
2000 planning and implementation issues 


Stride Rite is a good example of a company that has successful- 
ly migrated to Windows 2000 after carefully dealing with a wide 
range of hardware and application compatibility issues. 


For the full story, visit: www.windows2000advantage.com/ 
features/03-26-01_planning_implementation.asp 
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Whistler Beta 2 set for wide-scale scrutiny 


What do you do if you receive 30,000 customer-feedback reports in 
just two months? If you're John Gray, you pay close attention. As a man- 
ager responsible for Windows releases at Microsoft, Gray and his team 
help run Microsoft's “Whistler” Server Beta testing program. Gray knows 
from experience that a rigorous review by customers is critical before 
the software is finalized and sent to manufacturing later this year. 

Whistler, the code name for the next version of the Microsoft Windows 
server operating system, represents the customer-driven evolution of 
Windows 2000. With Whistler, Microsoft is building on the reliability, 
manageability and scalability that customers value in Windows 2000, 
while offering support for new, high-performance 64-bit hardware archi- 
tectures based on Intel Itanium processors. 

Businesses of all sizes are deploying the Windows 2000 server family 
in record numbers. Windows 2000 servers recently reached the one-mil- 
lion-licenses-sold milestone, just 12 months after launch — 30% faster 
than Windows NT 4.0. 

With the release of the Whistler Beta 2 server family, Microsoft sets in 
motion one of the largest and most ambitious software testing programs 
in its history. Nearly 300,000 customers, partners, OEMs, developers 
and other testers will have access to the latest version of its new server 
operating system software, and all of their comments will be reviewed 
before the product comes close to being considered complete. 

“The Beta testing program is our opportunity to take our server prod- 
ucts to a wide audience of people who will help us tune the fit and fin- 
ish,” explains David Thompson, vice president of the Server Product 
Group at Microsoft. “The input we receive from customers is absolutely 
critical to assuring that we build the product they need and want, and 
one that will perform as they expect.” 


For the full story, visit: www.windows2000advantage.com/ 
news/04-02-01_whistler_beta2.asp 


QUOTE OF THE WEEK > 


| “With Windows 2000, Microsoft 

| designed in new features that help 
overcome the greatest cause of system 
failures — namely software conflicts.” 


— Tom Manter 
research director 
The Aberdeen Group 
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The mission of Windows 2000 Advantage is to become 
your primary source of timely, useful information for planning 
and implementing Microsoft Windows 2000 on Compag solu- 
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Windows 2000 Advantage is a Web-only magazine because 
that lets us bring you, the IT leader, great stories that apply to 
your day-to-day work. We'll keep you up to date with a weekly 
e-mail alert so you don’t miss a thing. 

Windows 2000 Advantage is underwritten by Microsoft 
and Compag. Its charter is to address the issues that most 
concern IT managers charged with keeping their companies on 
top of the latest and best solutions Microsoft and Compaq 
have to offer. Toward that goal, we offer a wide range of stories 
including case studies, columns and news to provide you with 
information you can't find anywhere else. 
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ATE 
Privacy Invaders 
Use Children 
As Their Shield 


IDS HAVE BECOME politicians’ 
favorite battering ram for getting 
whatever they want. Whenever 
some policy or program needs some Shi- 
nola to make it palatable, they solemnly 
tell us that it’s “for the sake of the chil- 
dren.” In the IT realm, this usually in- 
volves an assault on 
freedom or privacy. 
Maybe it’s filtering 
software on PCs at public 


TORRALBAS 


libraries, or prosecutors 
strong-arming bookstores 
into giving them lists of 
what books people have 
ordered. Mostly, the im- 
Sact j seing fe ym > 
ex Tennmanas is an in- pact is being felt on the 
dependent IT consultant 
and Visual Basic 
developer in New York 
Contact him at 
alext@atc-software.com 


Internet. 

There, the almost daily 
news reports of pedophile 
rings and kiddie chat 
room stalkers give the 
politicians wonderful ammunition to slip more 
and more antiprivacy and antifreedom legislation 
onto the agenda. 

There’s no question that the abuse and preda- 
tion of children is abhorrent and deserves the 

ressive stance taken by the authorities. But 
what's hiding behind this “who can argue against 
it” facade is far more ominous. 

Even governments that appear to be liberal and 
respect individual rights are working overtime to 
get some kind of control over the Internet. It 
scares them. It’s too loose and anarchic, and they 
just don’t get it. So their tack is to wave some 
kiddie porn around and demand that the cops be 
granted sweeping rights that threaten all manner 
of legitimate activity. 

For example, in Great Britain a frightening new 
law, the Regulation of Investigatory Powers Act 
2000 (RIPA), has taken effect. In a nutshell, it 
compels Internet service providers to keep track 
of everyone's activities on the Internet. Everyone. 
All Web site visits, e-mail, Usenet, everything. 
Encryption? Forget it: If you “forget” your pass- 
word, you could get two years in the slammer, 
even if you haven’t been charged with anything. 

he British justify this unbelievable intrusion 
as necessary to track international 
i drug kingpins. They’ve nabbed 


into privacy 
terrorists an 
none of the 

pedophile or two as proof of why they need RIPA. 
Secret things beir | 


above but periodically trot out a 


l, secret, we can only 
guess what else they decide merits scrutiny and 
for what purpose. Industrial spying? Politicians 
looking to smear opponents? One hardly imag- 


ines that Osama bin Laden will go down in flames 


NEWS 


because his Hotmail account is tapped. 

British law is very different from ours, but 
we're not exactly looking good in the surveillance 
sweepstakes, either. 

Consider Uncle Sam’s Carnivore. This “black 
box” that the FBI is trying to make a part of our 
Internet experience is capable of absorbing a 
tremendous amount of information about all of 
us, not just the intended targets of investigations. 
It’s quite random in its techniques by design, and 
the only protection we have is the FBI’s word that 
it won’t be misused. This is the same FBI that 
spied on antiwar protesters during the Vietnam 
War, and on Martin Luther King, Elvis and John 
Lennon — and denied it at the time. 

The problem I have with these and many other 
schemes, and so should you, are the trade-offs 
we're making. Totalitarian, fascist or authoritari- 
an societies allow little or no freedom or privacy 
and boast of their low crime rates. Even “for the 
sake of the children,” we need to think twice 
and hard before we say yes to the government's 
intrusive wishes. D 


WILLIAM M. 
ze + 
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Engagement Starts 
With ‘Top Execs 
EMEMBER THE DAYS when users 
tossed requirements over the 
wall, IT tried to interpret what 
they meant and — two years later — 
delivered a system that missed the mark? 
Those days are long gone because IT is 
too critical to the bottom line and time 
frames are too com- 


pressed to continue 


down that path. 
Design, development 
and testing have become 
highly iterative activities, 
requiring participation 
from business analysts at 


ULRICH 


every step of the process. 
Therefore, IT and business 
professionals must work 
as a team to tackle tough 
assignments in highly 
constrained time frames. 
And IT must take the ini- 
tiative to educate, motivate, persuade and cajole 
business executives, management and analysts to 
work as a team. 

Most business professionals want to cooperate 
with IT; they just don’t seem to have time for 
what’s perceived as “IT’s job.” That’s why educa- 
tion and motivation begin with the executive 
team to help send a message on how critical it is 
to have everyone working together. 


WILLIAM M. ULRICH is a 
management consultant 


Strategy Group Inc 


Contact him at www. 
systemtransformation.com. 


The demand for new systems, flexible access to 


and president of Tactical | 
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legacy data and increased dependence on tech- 
nology mean that executives are poised to coop- 


| erate to accomplish these goals. IT must leverage 


this support to change the way business profes- 
sionals perceive their role in the development 
and evolution of information systems. 

Senior IT executives need to convey to busi- 
ness executives how critical it is to establish 
collaborative, cross-disciplinary business and IT 
teams. But before they launch another reorgani- 
zation, executives should have business and IT 
managers, analysts and technicians help form the 
teams needed to meet high-priority information 
requirements. 

A good approach is to hold a meeting where 
business, IT and third-party participants, such as 
ASPs or outsourcing firms, are encouraged to 
share opinions on the best way to work together 
to achieve common goals. 

During this meeting, participants would orga- 
nize according to ongoing IT projects or functions. 
This allows participants with common objectives, 
such as integrating supply-chain management, to 
form teams based on a common purpose. Execu- 
tives would provide a list of projects and instruct 
people to join teams related to their jobs. 

Management should encourage each team to 
experiment with ways to improve business and 
IT project collaboration before making any orga- 


nizational changes. Approaches should focus on 


improving communication among all project par- 
ticipants. Executives should review each team’s 
purpose and oversee them as they do today. 

Various ways to improve communication and 
collaboration include placing IT personnel into 
business units, using external facilitators, creat- 
ing social time so teams can get to know one 
another and holding off-site working sessions so 
that teams can organize in a quiet environment. 

A development team, for example, could hold 
an off-site meeting to clarify its purpose and 
build relationships. The meeting could open by 
having each member share what he believes is the 
most important factor in making the project a 
success. The team could then draft a project 
purpose and operating principles based on these 
success factors to guide project activities. 

A typical project purpose might read: “To build 
an e-business system that consolidates billing 
data into a single invoice, accessible to customers 
over the Internet.” A sample principle might 
state: “All project requirements, designs, plans 
and results may be viewed at any time by any 
project participant.” Teams should share success 
stories with other teams. Whatever approach a 
team uses should be augmented by the latest 
development technologies. For example, online 
conference tools can be used to reduce the need 
for in-person meetings. Integrated development 
environments can be used to develop and share 
designs, test plans and results. 

It’s important to allow teams to see what works 
for them and not to impose management’s view 
on the individuals doing the work. Forced collab- 
oration doesn’t work. The important thing is to 
be creative, stay focused on your project purpose, 
have some fun and share what works best. D 
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When their hosting problems become your hosting problems, 
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SHRINKING 
MANAGEMENT 


As the labor market 
tightens, laid-off IT 
managers are lowering 
their standards when it 
comes to job-hunting 

— a good move, say re- 
cruiters and economists, 
who warn that middle 
management is being hit 
hardest by the slowing 
economy. » 34 


PDA PASSIVITY 


Like PCs in the 1980s, 
PDAs are meeting resis- 
tance from IT depart- 
ments. But that resis- 
tance had better disap- 
pear fast, writes Peter 
GWM. Keen. » 36 


TAXING TIMES 


H&R Block’s IT workers 
have been on overdrive 
since December. But 
come April 16, they'll 
finally get the chance 

to take a breather. » 36 


VC EVOLUTION 


The time has come: Ven- 
ture capitalists (VC) are 
getting back to basics. 
They’re investing in 
technologies with proven 
customers and real rev- 
enue streams that can 
transform markets. » 42 


SHARED 


RESPONSIBILITY 


Now that shared ser- 
vices have been around 


for a few years, IT man- | 


agers are discovering 
just how difficult they 
are to manage and 
market. » 46 


MORE 
Opinion: Eric J. Sinrod ....34 
i 49 


BUSINESS 


THE BATTLE FOR 
E-COMMERCE DOLLARS 


NOW THAT WE'RE IN AN ECONOMIC DOWNTURN, Senior management may 
be more selective when it comes to shelling out money for an 


e-commerce project. But when you have a project that 
can help maximize revenue or possibly streamline your 
company’s supply chain, you're likely to get the atten- 


tion of top-level executives. 
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Laid-Off Tech Managers 


Mull Pay Cuts, 


Demotions 


Economist: Middle management 
is hardest hit by economic downturn 


BY JULEKHA DASH 


Sporting gr 


ay hair and a prep- 
py sweater at a recent pink-slip 
party in Manhattan, 37-year 
old Nicholas Hart looked dis 
tinguished in the crowd of 
black-clad twentysomethings. 
But even with his 15 years of 
IT experience, including two 
management Hart 
he’s ready to take a hefty pay 


jobs, said 
cut and demotion in order to 
find work 

hat’s a good move, accord- 
ing to recruiters and econo- 
mists, who warn that as in the 
early 1990s, much of the down 
sizing in the near future will 
come from the middle manage- 
ment ranks. 

“They may never have those 
kinds of jobs again, if compa- 
nies can make do with fewer 
Alec Levenson, 
an economist at the 
Calif.-based 


people,” said 
Santa 
Monica, Milken 
Institute. 

A recent study by the Infor- 
mation 
tion of America in Arlington, 
Va., revealed that IT hiring 
plans have been slashed by 
44% compared with 
last year’s. Companies will hire 
a total of 900,000 IT workers 
this year vs. 1.6 million last 
vear, according to the study’s 
findings, which were culled 
from phone interviews with 
nearly 700 IT managers. 


Technology Associa- 


almost 


The hard- 
core techies 
are the people 
who are still in 
high demand. 


TAMMY ANDERSON, 
MANAGING PARTNER, 
LYSEN ANDERSEN 
EXECUTIVE SEARCH 


“I do see the market 
changing the next 
months,” said Tammy Ander- 
a managing partner at 


not 
for Six 

son, 
Lysen 

Search 


Cumming, Ga.-based 
Anderson Executive 
Inc. IT job-seekers shouldn't 
be surprised if they see their 
salaries drop by 15% to 20%, 
she added. 

‘Many companies are scal- 
ing back and doing so at the 
manager and 
said Anderson. “The hard-core 
techies are the people who are 
still in high demand.” 

Workers can “build tangible 
goals to get back to the [salary] 
levels” they once earned, she 
said, by asking their new em- 


director level,” 


ER 


The Sex.com Saga 


BUSINESS 


ployers to offer salary reviews | 


after one year. 
Hart said he plans to re- 
phrase the three years of IT 


| management experience on his | 


résumé to “network engineer,” 
a title he believes will convey 
his hands-on technical experi 
ence rather than his manage- | 
ment skills. He has been job 
hunting since he was laid off in 
January from a firm that sells 
wholesale licensed handbags to 
New York retailer Tommy Hil 
figer Corp. 

Hart also expects to take a 
25% pay cut. “I can’t just sit 
here forever without a job. If I 
knew next month I'll get [a 
comparable job], I'd probably 
wait it out,” he said. 

Similarly, 37-year-old Rob 
Camp (not his real name), who 
was laid off several weeks ago 
from a New York-based Inter- 
net consulting firm, expects 
that his next job title will be 
less prestigious than his pre- 
vious title, vice president of 
partnerships and content. 

“I’m not necessarily interest- 


J. SINROD 


EX SELLS, so the domain name Sex.com 

has considerable value. Indeed, in what 

is believed to be the largest domain 

name award ever, a federal judge in San __ | 

Jose on April 3 ordered the former own- 
er of Sex.com to pay $40 million in compensatory 
damages and an additional $25 million in punitive 
damages to the person who originally registered 


the domain name. 


As the story goes, Gary 
Kremen registered Sex.com 
with Network Solutions Inc. 
in 1994 but did nothing spe- 
cific with the domain name. 
According to Kremen’s 
lawsuit, Stephen Cohen 
obtained the domain name 
from Network Solutions in 
1995 based on a forged letter. 

Cohen argued in his 
defense that he properly 
bought the domain name 
for $1,000. He also alleged 
that he had trademark pro- 
tection for Sex.com, based on 
an online bulletin board sys- 
tem he had run previously. 

Federal District Court 
Judge James Ware sided 


with Kremen and several 
months ago ordered the 


| return of the domain name 


to him. 

The judge also ordered an 
accounting of the financial 
operations of the Sex.com 
Web site; required the place- 
ment of $25 million, to be 


| held by the court until both a 


final judgment and full as- 


| sessment of damages oc- 
| curred; and prohibited Co- 


hen from selling or trans- 
ferring assets related to the 


| Web site. 


The stakes, of course, are 


| considerable, as some peo- 


ple believe that the Sex.com 
domain name alone is worth 


Disappearing Jobs | 


According to the Information 
Technology Association of 
America, demand for workers 
will slow in the following 
areas: 

DIGITAL MEDIA 


Down 62% 
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years old, has been holding out 
for a job in middle or even 
senior management. Berch was 
let go IT director at 


as an 


| Oak Ridge, Tenn.-based Inter- 


net Pictures Corp., which fea- 
tures online virtual tours of 
real estate properties. He said 
he probably wouldn’t take a 
job, say, in systems administra- 


| tion, because it wouldn’t be a 


| good career move. But he ac- 


DATABASE DEVELOPMENT/ 
ADMINISTRATION 


Down 59% 


WEB DEVELOPMENT 


Down 25% 


ed in retaining the title. I felt 


the title was overblown to be- 


gin with,” he said. 


Instead, Camp is looking for | 
work as a product manager, a 
position that could eventually 
land him in the executive ranks, 


he said. But he noted that his | 


once-six-figure salary will like- 


ly be slashed by $20,000. 
But Michael Berch, who is 45 | 


E-LEGAL 


tens of millions of dollars. In 
addition, Kremen’s attorney, 
Timothy Fox, reportedly 
said that Cohen has made 
$43.3 million from the 
Sex.com Web site, quite 
close to the ultimate $40 
million compen- 
satory damages 
award. 

According to 
a press release 
from Kremen’s 
attorneys, Ware 


| reached his ulti- 


mate ruling by 
finding that Co- 
hen had “devised 
and executed a 


ERIC J. SINROD is a partner 
at the San Francisco 


| knowledged that he may not 


recoup his former six-figure 


| salary. 


About six weeks ago, Berch 
was ready to begin a consult- 
ing assignment at a start-up, 
but the position was offered to 
a less-costly temporary worker. 

Job seekers who don’t have 
management experience, such 
as 25-year-old Dan Levine (not 
his real name), still remain 
optimistic. Levine, who lost his 
job as an Internet strategist at 
an entertainment firm last De- 
cember, said he will continue 
job hunting in hopes of finding 
something with a comparable 
title and salary. D 


standing until Cohen surren- 
ders property of his various 
ventures to the court. 

If this wasn’t trouble 
enough, Cohen is apparently 


| under house arrest for other 


reasons in Tijuana, Mexico. 

And the saga doesn’t end 
there: An Oregon attorney 
now claims that he’s entitled 
to a 15% interest in the Sex.- 
com site, based on his early 
work for Kremen in the 
case against 
Cohen. 

To the extent 
that there is real 
money behind 
Sex.com, the at- 
torney’s fees is- 
sue could be- 
come a real 
brawl. It has been 
reported that 
Kremen con- 


office of Duane, Morris 


fraudulent plan to 
steal the domain 


| name Sex.com 
from Gary 


| on his failure to appear in 


Kremen.” 

The trial included a war- 
rant for Cohen’s arrest based | 
court as ordered. Ware’s 
April 3 decision specifically 
provides that the arrest war- 
rant should remain out- 


and Heckscher LLP. 
He can be reached at 


ferred with more 
than 20 attorneys 
during the life of 
his case. 

At the end of the day, 


| there can be little doubt 
| that certain domain names 


in cyberspace have real- 
world economic value — 
even if their ownership is 
sometimes difficult to 
determine. D 
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H&R Block's IT Crew Survives 
Four Months of Taxing Times 


Interviewee: Dan Henderson, 
data center manager 
Company: H&R Block Inc 
Main location: Kansas City, 
Mo 

Tenure: Since 1998. “Since 
then, we've gone from a sleepy 
AS/400 shop to a huge IT orga- 
nization.” 

Number of IT employees: 
About 60 in the data center 
250 to 300 in corporate 

IT, plus 20 regional IT 

support teams for the 
company's 10,000 tax 
preparation offices. Dur- 

ing tax season each year, 
about 200 temporary IT 
employees are hired to 
handle calls into the 
help desk 

Number of employ- 
ees (end users): 
About 20,000 

“During tax season, 


to 100,000 with 

about 80,000 seasonal em- 
ployees. A lot of our offices are 
only open four months of the 
year.” 

What is tax season like for 
IT? “What's different about 
working here is that while em- 
ployees in most companies are 
slowing down in December and 
enjoying the holidays, here it's 
the opposite. We have major 
work to do and put in a fair 
share of weekend hours and 
late nights preparing to lock 
down before peak season 
starts. We're on pins and nee- 
dies in December and January.” 
When is peak season? “The 
first two weeks following the 
Jan. 28 release of W2s are 
huge because of all the people 
depending on their tax refunds 
to purchase homes or pay bills 
We actually have to turn busi 
ness away during that time be 
cause we can't handle the load 
5 one reason we 
launched our Online Tax Prepa 
ration product, so we could re 
coup some of that business 
and we're already up 500% 
over last year in completed 
online tax returns. The other 
peak is during the first two 
weeks of April.” 

How does the data center 
help H&R Block keep pace 
during such a hectic peri- 
od? “We have a Financial Infor- 
mation Network that receives all 


“That's 


What It's Like 
the company grows To Work at... 


completed returns via frame re 
lay or batched up every two 
hours via dial-up. Information 
from those is extracted, encrypt- 
ed and dumped into an Oracle 
database engine. Then we do 
summarizations of how well 
we've done ~ bookkeeping-type 
data - that are placed on vari- 
ous intranet sites where region- 
al and district managers can 
review their stats for the last 


week, last month, etc. They | 


use those to plan for 
upcoming weeks, in 
terms of head count 
and so forth.” 
Workday: “It's typically 
eight and a half hours 
with an hour for lunch, 
but during tax season, 
we're putting in longer 
days, and the devel- 
opers who support 
our [online tax prepa 
ration] product are 
heavily engaged. The 
tax laws are constantly chang- 
ing, so keeping our system up- 
to-date is an ongoing battle.” 
Must people carry beep- 
ers? Cell phones? “Oh yes, 
both. During tax season, we're 
on heightened alert and every- 
one is on call.” 
What will you do on April 
17? “We'll take a breather, and 
then we have to start preparing 
for next year’s tax season.” 
IT training: “Our CIO is very 
big on training, and the rule of 
thumb is 80 hours per associate 
each year.” 
Bonus programs: Short-term 
incentive program and signing 
bonuses. “Depending on your 
job, you can receive up to 30% 
of your salary as a bonus.” 
Dress code: Business casual 
with casual Fridays 
On-site day care? “No, but 
we have a tax-free fund you can 
contribute to from your pay 
check to pay for child care.” 
Little perks: “We own seats 
to the Kansas City Chiefs, so 
during football season, you can 
put your name in a hat for free 
tickets 
Would employees feel com- 
fortable e-mailing Henry 
Block? “Absolutely. He's the 
most approachable, easygoing 
guy you could ever meet. A very 
classy gentleman.” 
- Leslie Jaye Goff 
(Igoff@ix.netcom.com) 


| 


| 
| 
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PETER G.W. KEEN 


mbracing the PDA 


HE PC BEGAN IN THE LATE 1970s as a stand-alone de- 
vice that was literally “personal.” Initially, many corpo- 
rate information systems departments resisted it for 
three main reasons: First, it was a toy for hobbyists and 
not a real computer. Second, it intruded on their control 


of most aspects of IT decisions, and third, it 
threatened the integrity of the company’s tech- 
nology base in terms of security, standards, sup- 
port needs and operations. Yet people loved 
PCs and were going to use them regardless of 
what IT thought. 

Twenty years later, substitute the personal 
digital assistant (PDA) for the PC. Handheld 
tools like the Palm Pilot, Handspring’s Visor 
and Compaq’s iPaq began as stand-alone per- 
sonal tools with limited functionality — two of 
the first three IT concerns. Now that PDAs are 
becoming able to access corporate data and 
synchronize information with desktops, the 
third concern comes into play. 
PDAs, Web-enabled mobile 
phones, wearable computers and 
pagers/e-mail devices, such as Re- 
search In Motion’s BlackBerry, de- 
mand as major a shift in the design, 
operation and support of the cor- 
porate technology platform as did 
the networked PC. In the early 
1980s, IT wasn’t ready for the PC. 
But it must be ready for the wire- 
iess, PDA and handheld era. 

As with the PC, these new tools 
don’t fit automatically and easily 
into today’s client/server architec- 
tures. Nor do they fit easily into 
the organizational processes for 
balancing central coordination of 
the enterprise platform with de- 
centralized use. When a manager 
brings a Palm to work, adds a com- 
munications link, downloads data 
from the Web and accesses e-mail, 
all the old PC “problems” return. 
But they can’t be treated as prob- 
lems; they must be turned into 
business opportunities and IT 
responsiveness. 

The first need is for policy. It’s often unclear 
who owns the PDA. It may well have been pur- 
chased by its owner, not the company. When 
the PDA is in a briefcase, it’s personal. When 
it’s synced to the office desktop, it’s organiza- 
tional. This demands policy, architecture and 
support procedures. The faster that IT moves 
to establish the same types of policies the com- 
pany has for PCs, the better. Some principles: 
1. Recommend specific products in order to dis- 
courage operating system proliferation, such as 


IT must 
be ready 
for the wire- 
less, PDA 
and hand- 
held era. 


the Palm OS, Psion (mainly in multinational 
companies), Windows CE and BlackBerry. 

2. Establish volume purchasing agreements for 
these products. 

3. Select portal software for handhelds so that 
access to corporate information resources and 
intranets is coordinated and made secure. 

4. Establish support and training upfront, so 
you don’t find your staff becoming PDA doctors 
for managers and salespeople. Even simple 
PDAs require training when they’re used to 
access corporate data, sync to Microsoft Ex- 
change and connect to the corporate intranet. 
5. Get ready to address the coming single-most- 
complex issue for IT in the mobile 
commerce era as the extension of 
e-commerce, PDAs and handhelds: 
translation software and portals. 
All the new devices involve the 
Web, but they either use particular 
standards for displaying Web infor- 
mation, or their limitations of speed 
and screen size require Web pages 
to be simplified, tweaked and re- 
formatted. To meet users’ needs 
here, IT must embrace Wireless 
Markup Language, Handheld 
Device Markup Language, Voice 
Extensible Markup Language and 
the Wireless Application Protocol. 
And more standards will come. 

IT can’t view the PDA and other 
new wireless devices as toys, intru- 
sions or threats to the integrity of 
the enterprise client/server plat- 
form. Like the PC in the 1980s, peo- 
ple love these new devices and will 
use them regardless of IT. They'll 
then be mainly tools for personal 
productivity. 

When IT takes the lead in wel- 
coming PDAs and adapting its ar- 
chitecture, services and support of them, PDAs 
will become the powerful next generation of 
organizational tools. Just as the PC did. D 


Keen (peter@peterkeen.com) is chairman of Keen In- 
novations (formerly The International Center for In- 


formation Technologies) in Fairfax Station, Va.; a se- 


nior fellow at Differentis, a European business-to- 
business consultancy; and a distinguished visiting 
professor at the University of Delft in the Nether- 
lands. 
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Getting senior management to sign off 
on big-ticket e-commerce projects is 
no gimme when times are tough. Here 
are a few approaches that shrewd CIOs 
have taken to get the go-ahead on ke 
projects. By Sharon McDonnell 


HAT A DIFFERENCE A YEAR MAKES IN 
getting e-commerce projects approved. 
“A year ago, organizations told me 
| they had to do something ‘e,’ their 


| boards were concerned about the dot-coms and they 
were suspending rules in getting projects evaluated,” 
| says George Reilly, an e-business analyst at Gartner 
Inc. in Stamford, Conn. “Now the rules are back in 
| place, with the traditional ROI risk-reward ratio and 
| payback period being applied to projects for the first 
time in years.” 
“Customer-facing, revenue-generating projects 
| focused on the top line that extend opportunities to 
generate more sales and cross-sell products, since 
many companies are suffering from reduced sales — 
these are the projects that will be approved,” says 
Tom Mangan, a partner and global leader of enter- 
prise technology at Andersen Worldwide in Chicago. 

“As the economy slows, companies are pulling 
back, looking at large expenditures and asking what 
they get for it,” he adds. 

That’s borne out by a recent survey of e-business 
| leaders at 100 companies with at least $500 million in 
sales. The survey, conducted by Boston-based AMR 
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Research Inc., found that just 23% of the respondents 
planned to increase their e-commerce spending in 
the current downturn. But 87% planned to either 
keep or increase e-commerce spending in areas in- 
tended to win and keep customers, streamline sup- 
ply-chain activities and improve efficiencies using 
business-to-business online marketplaces 

For instance, top brass at Toysrus.com Inc. in Janu- 
ary greenlighted a plan to add an online boutique for 
Imaginarium, a chain of 40 specialty and educational 
toy stores acquired by Paramus, N.J.-based Toys R Us 
Inc. in 1999, through its partnership with 
Amazon.com Inc. in Seattle. 

Last August, Amazon.com agreed to handle fulfill- 
ment, customer service and distribution for Toys- 
rus.com, in which Toys R Us is a majority investor. 
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The world’s biggest toy retailer continues to handle 
product selection and purchasing for the site. 

Mirroring the Imaginarium emporiums that are 
being installed in some Toys R Us stores, the online 
addition is expected to go live by September. 

“Imaginarium is a brand very strongly associated 
with toys that are harder to find in a mass-market 
channel,” says Jeanne Meyer, vice president of strat- 
egy and corporate communications at Toysrus.com 
in Fort Lee, N.J. These items carry higher prices with 
higher margins that should resonate with high-in- 
come, highly educated buyers 

Toysrus.com also approved the transfer of the 
Babiesrus.com Web site, which sells items ranging 
from strollers to baby monitors, to its own store on 
Amazon.com. The transfer of Babiesrus.com is ex- 
pected to go live this spring. 

Meyer points out that it’s a big challenge to 
transfer thousands of items from one distribution 
center in Memphis to several Amazon.com distribu- 
tion centers and into those centers’ inventory man- 
agement system. But based on its forecast, the effort 
to transition the back end of Babiesrus.com “will 
save 40% of [Toysrus.com’s] operating costs, after 
paying fees to Amazon.com, based on what we 
learned from our cobranded toy store last year,” says 
Meyer. “We wouldn't do it unless we had a great 


| experience with Amazon.com; last year, we tripled 


our online sales.” 

Meanwhile, a decision to launch an extranet for 
Toysrus.com vendors was approved in February; 
beta-testing is expected to start this summer. Using 
the extranet, vendors should be able to check inven- 
tory levels and consumer demand in real time in- 
stead of monthly or weekly and act quickly if items 
are out-of-stock, which should translate into higher 
customer satisfaction. 

“We're driven by the Five P’s: profit, profit, profit, 
profit and profit. This is the kind of project now 
being approved,” says Meyer. “We’re taking a hard 
look at the economics of our product mix, being 
more careful to offer products that make sense on- 
line and meet the demand and moving away from 
low-ticket items. For example, we do higher video 
game sales online. Or instead of one Matchbox car 
for under $3, we might sell an assortment of 10 to 15 
Matchbox cars exclusively online.” 

Officials at Toysrus.com wouldn't disclose dollar 
figures for these efforts. But Reilly estimates that 
such an extranet costs “millions, if not tens of mil- 
lions, for any substantial company to do this,” de- 
pending on scope, volume and the need for real-time 
integration into back-end systems. Adding a store to 
an existing Web site, “which is pretty rich and prod- 
uct-intensive,” costs an average of $2.5 million, says 
Geri Spieler, a Gartner research director. 


Shortening the Supply Chain 

The AMR survey also noted that 94% of the com- 
panies polled planned to increase their investments 
in business-to-business trading exchange projects. 
For example, Morristown, NJ.-based Honeywell 
International Inc. agreed last month to become one 
of the 12 principal investors in Cordiem LLC, a Web- 
based global marketplace in Washington. Cordiem is 
aimed at saving time and money in the aviation in- 
dustry’s $500 billion supply chain by streamlining 
key areas such as maintenance and engineering, fuel 
services, and food and beverage catering. 

The rationale behind Cordiem, whose rollout is 
expected late this spring, is “fundamentally to make 
the aerospace industry more efficient, use more 
modern technology tools, streamline purchasing and 
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Tips on winning approval for e-commerce projects: 


Think more like a business 
executive and acquire a com- 
fort level for presenting proj- 
ects to nontech executives in 
their language. 


Make a strong business 
case and quantify a project's 
expected revenue, productivi- 
ty and customer satisfaction 
gains as much as possible 


Use the slowing economy 
as an argument in your favor 
Tough times means increas 
ing sales and efficiency are 
More important than ever. 

If you're striving toward a 
business-to-business online 
marketplace, build alliances 
with other partners by point- 
ing out the mutual benefits 


better manage inventory,” says Jim Taiclet, president 
of Honeywell Aerospace Services, a Phoenix-based 
unit of Honeywell, one of the world’s biggest aircraft 
engine and equipment makers. 

“As a supplier, we want to expand our service 
capability to provide spare parts, overhauls and 
rebuild engines. But we want to take the paperwork 
out and build connectivity between the airlines’ 
purchasing and order inventory and our internal 
systems,” Taiclet adds. 

The key to obtaining approval from Honeywell’s 
CEO and the head of its aerospace division was “an 
attainable business goal we could clearly articulate 
and getting customer input right upfront with the 
airlines,” Taiclet explains. 


Better Sales Follow-Through 


More effective sales follow-through is what drove 
Kmart Corp. to finish installing more than 3,500 
Internet shopping kiosks in 1,100 stores nationwide 
in December. Blinking blue lights and jazzy signs 
draw shoppers to the kiosks, which connect directly 
to the BlueLight.com Web site, where 200,000 Kmart 
products are for sale — more than twice what’s avail- 
able at the average Kmart. 

Customers pay for merchandise by swiping a 
credit card or prepaid Kmart cash card at the kiosks, 
which are found on counters in the customer service, 
sporting goods and electronics departments. 

A plan was approved in late August to convert the 
pre-existing electronic catalog machines by the 
board of BlueLight.com LLC, the San Francisco 
e-commerce arm of Troy, Mich.-based Kmart. The 
board includes Kmart CEO Charles Conaway, Kmart 
CIO Randy Allen, BlueLight.com CEO Mark Gold- 


| stein and Rex Golding, principal managing director 


at Softbank Venture Capital in Mountain View, Calif., 
a major investor. 

“Everyone saw this was an asset not being fully 
realized — [one] that Kmart could make a lot more 
effective and very important to our overall ‘sticky 
bricks’ strategy to avoid losing sales if a customer 


| can’t find an item or a store is out-of-stock,” says 


Steve Chaffin, BlueLight.com’s director of in-store 
marketing. 

Kmart isn’t alone in looking past the current eco- 
nomic downturn to the upside business potential 
that e-commerce can deliver. Says Jeetu Patel, exec- 
utive vice president of research at Doculabs Inc., a 
Chicago-based technology research firm, “Smart 
companies aren’t curtailing e-commerce spending. 
The last thing you want to do is cut the mechanism 
that generates revenues.” D 
McDonnell is a freelance writer in Brooklyn, N.Y. 
Contact her at sharonfmc@compuserve.com. 











THE VISITORS FROM A PARALLEL UNIVERSE 


LOTUS ror KNOWLE 


Day 21: People here can leverage intellectual capital! They use “knowledge management” software to catalog 





Log Entry, 
employee exp se. Other emp can then locate anc capitalize on valuable existing knowledge, rather than laboriously 
Norkers may also collaborate. In this way, e-businesses here save valuable time getting to market - a competitive 


Lotus | 


cient than our “Finger of Knowledge” technique. We must download a trial at lotus.com/visitkm today. 






| HAD KNOWLEDGE. BUT NOT LIKE THIS. 


DGE MANAGEMENT 


YOU NEED A DIFFERENT KIND or SOFTWARE. 


| ‘ , IT’S A DIFFERENT KIND or WORLD. 
© business software 
Re 


BUSINESS 


The New VC Mantra: 


OHOW ME 
THE CUSTOMER 


ASPs, optical networking and 
specialized chips still attract money, 
but venture capitalists are saying 
goodbye to content. By Pimm Fox 


FTER CLEARING AWAY the 
wreckage from the venture 
capital excess of last year, 
when it seemed that anyone 
capable of putting together 
a PowerPoint presentation 
could land a substantial first 
round of financing, the ven- 
ture world now appears to 
have a more realistic focus. 

Venture capital investors “have shift- 
ed away from new company formation 
to landing additional funding for exist- 
ing companies,” says Chris Gaffney, a 
managing partner at Boston-based 
Great Hill Partners LLC. And those 
companies must have real revenue and 
a clear value proposition before ven- 
ture capitalists will plow more money 
into them. 

Gaffney cites firms such as Intra- 
Links Inc., a New York-based appli- 
cation service provider (ASP) that pro- 
vides a shared online workplace for 
document management. IntraLinks re- 
ceived $40 million in new equity capi- 
tal in February from New York-based 
Rho Management Co. and investment 
affiliates of Soros Private Equity Part- 
ners LLC, also in New York. 

IntraLinks “has a subscription-based 
model and customers such 

is SunTrust Banks; that’s 

attractive to a VC,” 
Gaffney 
space is still getting money, 
provided you have real pay- 


says 


‘The ASP service 


ing customers.” 

Bill Elkus, co-founder and 
managing director of Pasa- 
dena-based Idealab Capital 
Partners, agrees. He says the 
market has changed dramati- 
cally since last year, when an 
event worthy of winning fi- 


GROSSER: “Every- 
one’s looking to [be 
profitable] as soon 
as is practicable.” 


nancing for a firm might be “you hired 
100 people.” 

Today, it’s back to basics. “You need 
verifiable customers, real products and 
services, and experienced manage- 
ment,” says Elkus. “We are going back 
to the time when entrepreneurs made 
a product — say, an optical transceiver 
— and then came to a VC with beta 
tests, referenceable orders and cus- 
tomers. That is still financeable.” 

According to Elkus, venture 
capitalists today are interested 
in companies that have attrib- 
utes that will allow them to 
transform large, competitive 
markets. For example, ASPs 
could have a big impact on the 
software industry, as could 
hardware makers that can 
evolve into a server-based 
IP model or can store data 
for an enterprise. 

Money is also flowing into 
wireless technology at the 
enterprise level. For example, 
San Francisco-based Neomar Inc. lets 
enterprise users access applications 
and information from remote devices 
such as pagers, Wireless Application 
Protocol-enabled cell phones or per- 
sonal digital assistants (PDA). 
They all use public-key infra- 
structure and Wireless Mark- 
up Language technology. 

“[Neomar is] going after a 
real market and [has] cus- 
tomers such as BellSouth 
Wireless Data,” says Elkus, re- 
ferring to the company now 
known as Cingular Wireless. 

For Adam Grosser, a gener- 
al partner at Foundation Cap- 
ital in Menlo Park, Calif., in- 
vestment prospects must tar- 


SALZMAN: VCs 
need “a diversified 
portfolio of venture 
investments.” 
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get Fortune 1,000 customers and have 
a direct sales model. “Technology — 
telecom, network equipment, semicon- 
ductors and enterprise software — are 
our focus,” he says. 

Grosser says he looks for companies 
that “can support great gross margins, 
north of 55% and preferably in the 60% 
to 70% range. This gives you a possibil- 
ity of scaling a business from cash 
flows in a reasonable time frame.” So if 
a company can demonstrate sales mo- 
mentum in a large market segment, the 
organization will be financeable “until 
... it is self-sustaining,” Grosser says. 

Recalling last year’s venture capital 
frenzy, Grosser says content is dead, as 
is anything that’s advertising-supported. 
At Foundation Capital, telecommuni- 
cations and big iron for networks are at- 
tractive, though valuations for all enti- 
ties are down significantly this year. 

“Everyone is looking to cut the burn 
rate and bring about profitability as 
soon as is practicable,” he says. 

Optical start-ups are still interesting, 
as are network systems that increase 
capacity and networking services to 
metropolitan areas, says Grosser. “The 
theme is ‘more with less’: less power, 
less rack space, higher integration to 
deliver faster throughput,” he says. 

Alan Salzman, a founding partner at 
San Bruno, Calif.-based VantagePoint 
Venture Partners Inc., says broadband 
and wireless communications are the 
dominant trend right now, “but you 
still need to have a diversified portfo- 
lio of venture investments.” 
In addition, he says he sees a 
big demand for specialized 
semiconductors. 

For example, one of Van- 
tagePoint’s portfolio com- 
panies, BOPS Inc. in Moun- 
tain View, Calif., develops 
scalable and reusable digital 
signal processors for applica- 
tions such as digital cameras 
and PDAs. 

“We're seeing semiconduc- 
tors getting so dense that we 
like new [ways] of packaging 
the chips,” says Salzman. For example, 
he says, that’s what’s behind Silicon 
Bandwidth Inc., a Fremont, Calif.-based 
company that develops high-perfor- 
mance, low-cost I/O interconnect 
product platforms that address the 
convergence of silicon and systems. 

Optical component makers are also 
prime targets for funding. For instance, 
Billerica, Mass.-based Axsun Tech- 
nologies Inc. is focused on a new class 
of optoelectronic components that can 
accommodate a range of optical de- 
vices that are now being developed 
and deployed by the telecommuni- 
cations equipment industry. 

“This is complex stuff and is where 
we see current investments paying 
off,” says Salzman. D 
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A selected list of companies 
receiving funding during 
the first quarter. 


SEMICONDUCTORS 


Semiconductor maker Genoa Corp. in 
Fremont, Calif., raised $75 million last 
month from Global Crossing Ltd. and 

WorldCom Ventures, the venture capital 

arm of network services provider 
WorldCom Inc. The money is intended for 
the testing and marketing of a chip-based 
device that makes optical networks more 
efficient and less expensive to operate 


NETWORKING 


San Francisco-based Yipes 
Communications Inc., a provider 
of managed optical IP networks, closed 
a third funding round in January, raising 
$200 million. The new investment 
brings the total equity Yipes has raised 
to $291 million since the company's 
inception in July 1999. 


ASPS 


Avasta Inc., a San Francisco-based 
provider of an operating infrastructure for 
Internet-based business applications, 
received more than $50 million in 
financing in February. The financing 
includes $15 million in private funding by 
American Express Financial Corp. and 
more than $34 million in additional private 
funding and equipment financing from 
Alliance Capital Management LP, RS Co- 
Investment Fund and others. 


SOFTWARE 


Pagoo Inc., a Dublin, Calif.-based 
provider of IP-based voice applications 
software and services, raised $15 million 
in fourth-round funding from 3i Group 
PLC, meVC Draper Fisher Jurvetson 
Fund | Inc. and Hummer Winblad 
Venture Partners. 


MOBILE & WIRELESS 


Winphoria Networks Inc., a Tewksbury, 
Mass.-based infrastructure company for 
mobile wireless service providers, raised 

$42 million in a second round of 
funding last month. 
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Protecting critical power systems doesn't have to be a bear. The new Npower UPS from 
Liebert is the best-in-class for midrange three-phase power systems. Highly efficient, 
with low maintenance costs and a small footprint, Npower is a powerful value. 


Strong ¢ True double-conversion technology protects against all power 
problems, both outside and inside your facility. 


¢ All Liebert three-phase UPS models achieve 1,000,000-hour 
critical bus MTBF. 


Sensitive « Industry-best waveform quality under all operating conditions. 


e Fastest response to changing loads and transfers. 


Liebert is the leader in protecting critical systems from power and environmental 
threats. For over 30 years, businesses worldwide have relied on our blend of superior 
products, local support, and global monitoring and service. 


© 2001 Liebert Corporation. All rights reserved throughout the world. Specifications subject to change without notice. 
All names referred to are trademarks or registered trademarks of their respective owners. 
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hp storage disaster recovery 


What it does: It maintains the integrity of your data while 
transmitting it to your backup storage site, even if it’s 
thousands of miles away. 


How it helps: Your data is completely 
and immediately recoverable in the 
event of a disaster. 


How you'd explain it to a clumsy 
antique shopper: Don’t worry about 


the one-of-a-kind Ming vase you 
just dropped, we’ve got another in 
the back just like it. 


hp infrastructure solutions for an always-on business: www.hp.com/go/storagesuccess 





46 


Shared 
Pain 


Now that shared services are out 
of their infancy, IT managers are 
discovering just how tough these 
organizations are to manage and 
erow. By Elizabeth M. Ferrarini 


FTER TWO YEARS OF FLYING 
solo, Houston-based Shell 
Services International (SSD, 
which offers shared services 
for IT, human resources and 
business consulting to other 
firms, is going back to being 

an internal shared services organ- 

ization at Royal Dutch/Shell Group. 
rhe reason for the switch? Because 
the oil and gas company’s business 
units said “they weren't getting the 
attention they needed,” says Dennis 

Wymore, SSI’s manager of shared ser- 

vices consulting. “They wanted us to 

emphasize their needs more than 

those separate from the company. A 

shared services [unit] can’t have one 

foot in two worlds, each with different 
market requirements.” 

SSI isn’t alone in wrestling with 
shared services challenges. According 
to Dean Davison, an analyst at Meta 
Group Inc. in Los Angeles, IT shared 
services groups typically have to con- 
tend with many thorny issues, includ- 
ing the need to get internal IT staffers 
to understand how to price services, 
how to provide them and how to com- 
municate their value to business units. 

IT shared services groups are sepa- 
rate, accountable organizations set 
up to consolidate and market func- 
tions such as infrastructure or appli- 
cations development uniformly to all 
business units. They must focus on 
meeting the business units’ needs 
while at the same time recovering 
their costs through chargebacks to 
the business units. 


Two exceptions to this industry- 
wide conundrum are the IT shared 
services units at Bristol-Myers Squibb 
Co. in New York. The two service 
groups have successfully carried out 
programs and procedures to meet the 
needs of the $20 billion pharmaceuti- 
cal firm’s business. 

Information Management (IM) 
Shared Services oversees Bristol- 
Myers’ entire IT infrastructure, in- 
cluding 42,000 desktops, six global 
data centers, 2,000 production appli- 
cations and a wide-area network. The 
Enterprise Systems and Processes 
group oversees the worldwide SAP 
enterprise resource planning system 
for the company’s financial and manu- 
facturing divisions. 


Outsourcing Analysis 


Conducting routine outsourcing 
analysis has helped IM Shared Ser- 


vices evaluate the market competitive- | 


ness of its internal services. Early last 
year, IM Shared Services participated 
in an outsourcing bid with eight other 
third-party services firms to support 
more than 23,000 of Bristol-Myers’ 
North American desktops. 

With Bristol-Myers’ chief financial 
officer’s support, the contract was 
awarded to IM Shared Services’ inter- 
nal desktop group, which hired a third 
party to service hardware. 

“We offered a lower cost and guar- 
anteed a higher level of service than 
the third-party bids. All of the business 
unit chief financial officers were kept 
informed during the bidding process,” 





says Susan O'Day, vice president of IM 
Shared Services, who declined to com- 
ment on the value of the deal. 

Benchmarking and meeting service 
levels have become important met- 
rics in gauging the success of Bristol- 
Myers’ two IT shared services organi- 
zations. “If you don’t have these met- 
rics, then how can you communicate 
how well you're doing internally?” 
asks Jack Cooper, the company’s CIO. 

The good news, he says, is that the 
company is meeting most of its ser- 
vice-level agreements, thanks in large 
part to its emphasis on benchmarking 
its costs and activities. 

“We benchmark extensively in the 
areas of productivity, unit cost of op- 
erations and service delivery,” Cooper 
says. “We've done very well in Gartner 
Group’s benchmark program.” 


Becoming Customer-Focused 


Still, many shared services organiza- | 


tions have struggled to learn how to 
become more customer-focused, par- 
ticularly those with IT professionals 
who had to be weaned from a service 
mentality. To get its IT department to 
become more customer-focused, BC 
Hydro hired several third-party train- 
ing firms to work with staffers on 
everything from communication to 
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leadership skills, says John Ashurst, a 
shared services manager at the Van- 
couver, British Columbia-based elec- 
trical utility. 

Effective marketing is another im- 
portant skill set IT professionals must 
develop to bolster their shared ser- 
vices organizations. In 1999, the IT 
shared services organization of health 
insurance provider Blue Cross/Blue 
Shield of Florida in Jacksonville, Fla., 
made some cosmetic moves to be- 
come more customer-focused. For 
example, it formed a marketing group 
that pitches new network and desktop 
support programs to employees. 

Another group, IT Systems Integra- 
tion, evaluates hardware and software 
products for the company’s IT envi- 
ronment and recommends those prod- 
ucts to customers. 

Nevertheless, the organization ad- 
mittedly has a long way to go to fine- 
tune its customer service capabilities. 
“We have to do a better job of getting 
our customers to trust our product 
recommendations,” says Larry Taylor, 
a systems administrator at Blue Cross 
Blue Shield. “Customers still insist on 
buying what they want. Often, these 
products don’t fit into our IT infra- 
structure.” 

But that could change. Taylor says 
Blue Cross’ shared services group is 
pushing for a policy where it would 
have to approve any software before it 
could be loaded onto a server. Mean- 
while, Taylor says the IT Systems Inte- 
gration group is trying to get as close 
to business units as possible, often 
inviting department heads to meetings 
with vendors. DB 


Ferrarini is a freelance writer in 
Arlington, Mass. Contact her at 
elizabethferrarini@yahoo.com. 


« If vou don't 
have these 
metrics, then 
how can you 
communicate 
how well you're 
doing internally? 


JACK COOPER, CIO 
BRISTOL-MYERS 





Disaster? What disaster? 


The complete hp storage solution: 


hp surestore xp512 disk array: 


hp metrocluster for hp-ux servers: 


hp surestore cluster extension xp: 


hp surestore continuous access xp: 





hp services: 


To find out how hp storage solutions can help your company like they helped 
Barclays Stockbrokers, Celanese Acetate and Litton PRC, visit www.hp.com/go/storagesucces 








When the OTE goes down 
will your Web site stay up? 
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WEB HOSTING: At AT&T Business, we treat your Web site 
like the mission critical application it is. You're hosted in 
world-class Internet Data Centers with redundancies in power, 
security, environmental and fire protection. Your data and 
applications travel over an IP backbone that's state-of-the-art 
in speed, security and reliability. And our staff monitors and 
maintains your systems 24/7. To see how far we go to keep 
your Web site going, contact us anytime. We're up. 
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———~_ Innovative Networks. Innovative Thinking.” 


ANNOUNCING THE GRAND OPENING OF OUR 
CHICAGO AREA INTERNET DATA CENTER 
LOCATED IN LISLE, ILLINOIS 
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Call 1888 822-5165 or 
visit www.att.com/business/hosting 








BUSINESSADV 


Dear Career Adviser: 


I’m an experienced senior manager of professional ser- 
vices who got caught in the dot-com downdraft. To my 
amazement, in interviews for professional services man- 
agement positions, interviewers ask questions regarding 
my years of C++ and Java programming rather than 


questions about business man- 
agement issues like making 
professional services profitable 
and my experience managing a 
profit and loss statement. Is 
this a temporary trend? 

OUT IN LEFT FIELD 


Dear Left: 


You'll need to cover two 
bases to land a professional 
services senior manager slot 
right now, says Joseph Sabrin, 
founder of eHire.com Inc., a 
consulting firm in New York. 

First, keep an active list of 
customers ready to buy from 
your potential employer. Sec- 
ond, have enough Java and 
C++ programming skills to 
show you can get the job 
done right. You need to show 
that you have both the man- 
agement skills and the techni- 
cal expertise to bring in busi- 
ness, manage the project and 
assure that it will be done on 
time, within budget and at the 
highest level of quality. 

To get hired faster, you 


might want to follow Sabrin’s 
advice to stay flexible on 
compensation. “If you appear 
to be a bargain to a hiring 
manager, you'll get in the 
door faster,” he says. 


Dear Career Adviser: 

I’ve been a programmer with 
Java, shell-scripting and Perl 
skills at an e-commerce com- 
pany. I want to move into a 
more marketing-oriented role, 
potentially arranging partner- 
ships among companies. What 
exactly do I need to know and 
how sales-oriented do I need 
to be? 

— BIZDEV DAN 


Dear BizDev: 

Business development jobs 
certainly require a strong 
technical background since 
you'll need to evaluate 
whether two companies can 
truly link together in reseller, 
manufacturer or systems in- 
tegration partnerships. Your 


Re 


Du Pont Pharmaceuticals Co. in 
Wilmington, Del., last month ap- 
pointed Ronald E. Morgan as its 
ClO. Morgan most recently served 
as CIO at PurchasingFirst.com. Pri- 
or to that, he spent five years at 
Cardinal Health Inc. in Dublin, Ohio, 
where he was responsible for infor- 
mation systems and data center ac- 
tivity for its distribution division. 


Earl M. Lambert II last month was 
named CIO at Houston-based Enter- 
prise Products Partners LP, where 
he will manage the company’s infor- 
mation systems and technology re- 
sources. He previously served as 
vice president of information sys- 
tems at Coastal Merchant Energy 
LP in Houston. Enterprise Products 
is an integrated services provider 


| for both energy producers and con- 


The Goodyear Tire & Rubber Co. in 
Akron, Ohio, last month tapped 
Steve Buckus as director of global 
infrastructure. In this role, Buckus 
will be responsible for global inte- 
gration of Goodyear’s IT systems. 


| Prior to this appointment, Buckus 


was director of distributed systems 
at FedEx Corp. in Memphis. 


| Gordon Krstacic last month was 


named chief operating officer and 
ClO at the Internet Trade Finance 
Exchange (ITFex). Previously, 
Krstacic was a consultant at Cap 
Gemini Ernst & Young, where he 





was responsible for new business 
and account management in the ar- 





technical background will 
help you evaluate technolo- 
gies, understand the fit, as- 
certain the resources re- 
quired to integrate both sides 
and accurately estimate the 
ongoing support and training 
these deals require. 
However, companies are 
crying for rev- 
enues right now. 
This means that 
business develop- 
ment jobs are 
more often hard- 
wired into the 
sales — rather 
than the market- 
ing — organiza- 
tions and connect 
directly to rev- 
enue generation 
and quotas. 
According to 
Joe Thomas, di- 
rector of strategic 
alliances at Viador Inc. in 
Mountain View, Calif., unless 
you've been hiding consider- 
able sales and business skills 
behind that developer’s ré- 


| eas of e-commerce, advanced tech- 
nologies and financial services. New | 
| TradeMC, Kiehnle was CFO at 

| WorldPoint Logistics Inc., a trans- 

| portation services provider in Belle- 
|; vue, Wash. 


York-based ITFex is an online mar- 


ket for global trade finance. 


Hub International Ltd., an interna- 


sumé, making the jump di- 
rectly into a quota-carrying 
business development role is- 


all, your counterparts at 
prospective partner compa- 
nies already will have that 
business sense to use to their 
advantage while you'll still be 
climbing the learning curve. 

A more appropriate first 
step to transition into a busi- 
ness development role, says 
Thomas, is to start out as a 
sales consultant or an inte- 
gration engineer dedicated to 
supporting business develop- 
ment activities. 


Dear Career Adviser: 

You recently answered a 
question regarding turnaround 
and restart compa- 
nies. How can I cal- 
ibrate public and 
private companies, 
whether they’re 
software develop- 
ment or consulting 

companies? 
— NUMBERS 
TALK 


FRAN QUITTEL is an expert 
in high-tech careers and 
recruitment. Send 
questions to her at 
www.computerworld.com/ 
career_adviser. 


Dear Numbers: 
Early-stage com- 
panies are typical- 
ly willing to tell 
serious candidates 
the number of employees, the 
amount of capital raised, who 
the investors are, the mile- 
stones achieved and sought, 
and the company’s plans to 


as senior vice president and chief fi- 
nancial officer. Before joining 


tional insurance brokerage in Toron- | -- 


to, last month announced the ap- 


| pointment of Darlene J. Jacus as 
| ClO and Deborah K. Wilson as chief 
| technology officer. Jacus will over- 


see Hub International's e-commerce 
operations, identify new business 
opportunities and oversee the inte- 
gration of emerging technologies. 
Wilson will be responsible for global 
technology strategies, with an em- 
phasis on new and emerging tech- 
nologies, as well as process re- 
design in operations. 


TradeMC Inc., an Irving, Texas- 
based capital and indirect goods 
marketplace, last month announced 


| the appointment of Robert Kiehnle 





| Gary Mayer was recently named ex- 


ecutive vice president of database 


| marketing and analysis at DataCo 
| LLC, a Des Plaines, Ill.-based mar- 


ket research firm. Mayer comes 


| from GEFA Partnership Marketing 


Group in Louisville, Ky., where he 


| was vice president of database mar- 
| keting and analysis. 


Amy King was recently appointed 


| CIO at MJB Wood Group Inc. in Irv- 
| ing, Texas. King has been at the 
| company since 1990, holding a vari- 


ety of positions in operations and 
corporate planning. As CIO, she is 
responsible for overseeing MJB’s 


| information strategy, architecture 
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raise future rounds of financ 
ing, says Perry Wu, venture 
partner at ComVentures, a 
Palo Alto, Calif.-based ven 
ture capital firm focusing on 
early-stage communications 
and Internet investments 
With that, you can work 
backward to extrapolate the 
data you need 

Wu says to use $100,000 
per month, adjusted some- 
what by location, to calculate 
the burn rate for every 10 em- 
ployees. This should allow 
you to estimate the amount of 
money remaining from prior 
rounds of financing and the 
time the company has before 
it will need more money 

Even if the company is 
achieving its milestones, rais- 
ing money can take three 
months or more, so be sure 
the company has enough run- 
way to survive. According to 
Wu, consulting firms typical- 
ly have lower burn rates if 
they staff up by project. 

For public companies, Illi 
nois State University busi- 
ness librarian Katherine M. 
Weir suggests checking out 
key statistics found in busi- 
ness publications, such as In- 
dustry Norms and Key Busi- 
ness Ratios by The Dun & 
Bradstreet Corp. in Murray 
Hill, N.J., which compare 
companies by industry seg- 
ment and size. Fortune maga- 
zine’s latest rankings also of- 
fer excellent data on today’s 
most profitable companies 
and industries. D 


and enterprise resource planning 
development. 


Cheri Roach recently joined ONI 
Systems Corp. as the company’s 
C10. ONI is a San Jose-based pro- 
vider of all-optical telecommunica- 
tions equipment for metropolitan 
and regional networks. Roach previ- 
ously worked at Savannah, Ga.- 
based Gulfstream Aerospace Corp., 
where she served as vice president 
of IT for seven years. 


Vincent T. Taylor earlier this month 
was named CIO at L-3 Communica- 
tions Corp., a New York-based mak- 
er of specialized communications 
gear. In this newly created position, 


| Taylor will oversee business and 

| technical systems, e-commerce and 
| telecommunications. Taylor has 

| served in various roles within L-3 


and its predecessor companies for 
more than 11 years. 
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FAB FOUR ONLINE 


The Beatles’ official 
Web site at Beatles.com 
could offer lessons to 
developers at main- 
stream businesses that 
want to push their Web 
sites beyond HTML and 
simple graphics content 
in the interest of luring 
employees and cus- 
tomers, or improving 
the cachet of the com- 
pany name.» 52 


SECURITY 


JOURNAL 


As viruses continue 

to creep into his net- 
work, security manager 
Vince Tuesday ponders 
why today’s antivirus 
tools reduce but don’t 
eradicate this costly 
problem. He’s hoping 
readers will offer some 
advice from their own 
experiences. » 54 


LOCATING 


CUSTOMERS 


Some limited location 
services are already 
here, but as 911 services 
are rolled out to cell 
phones in the coming 
years, many companies 
plan to try to leverage 


that technology to direct | 
cell phone and handheld | 


users to nearby services. | 


The process will be 
complex, given the FCC 
rules, privacy concerns, 
standardization worries 
and more. » 58 


QUICKSTUDY 


Intrusion-detection sys- 
tems are designed to let 
you know when a sys- 
tem or network is being 
used inappropriately or 
without authorization. 
Find out more about 
how they work. » 62 
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BUILI-IN IP 
VULNERABILITIES 


THE FEATURES THAT MAKE THE INTERNET WORK are also the ones that sometimes 
allow hackers to shut parts of it down. Most networks are protected 
against high-level hacks but are missing the easy counters that would 
stop basic, yet devastating, attacks that use the built-in weaknesses 
of the Internet Protocol itself. Those vulnerabilities exist because 


TCP/IP hasn’t changed much since the days when it was 
only used by a relatively small, trusting community of 
scientists and engineers. 








The Beatles.com Web site could provide 
lessons for traditional business sites 


BY MATT HAMBLEN 
IVEN THE Fab 
Four’s legendary 
reputation, how 
were developers 
able to build an 
official Web site that could do 
justice to the Beatles name? 
Answer: With a little help 
from their friends — not 
mention industry-proven de- 
velopment tools and some cus- 
tom software. 
Officials at EMI Records Ltd. 
and Apple Corps Ltd. in Lon- 
don timed the launch of www. 


to 


beatles.com last November to | 


coincide with the release of 


“The Beatles 1” CD, a compila- 


tion of 27 chart-topping Beat- 
les singles. 

The result is a site built with 
state-of-the-art 
gages users with quirky naviga- 
tion, many interactive compo- 
nents, colorful graphics, sound 
and even games with live chat. 

The site could offer lessons 
to developers of mainstream 
businesses that want to push 
their Web sites beyond HTML 
and simple graphics content to 
lure employees and customers 
improve the cachet of the 
company name, analysts said. 

Even the way the Beatles.- 
com site was built could offer a 
lesson in orchestrating a crash 
development that 
brings together a of 


toois that en- 


or 


process 
variety 


| site 


les’ music and appeal stretches 
so far around the world, we felt 
the Web site needed to reflect 
this variety,” Cauchi explained. 


Like many sites on the Web | 


today, Beatles.com has both 
low-tech and high-tech entry 
points to accommodate the 
different bandwidth connec- 
tions and browsers of end 
users. The high-tech entrance 
requires Flash 5 and Shock- 
wave 8 multimedia players, 
both plug-ins from Macro- 
media Inc. in San Francisco. 
High-tech access is possible 
with a 56K bit/sec. dial-up mo- 
dem and allows users to play 
games and take virtual tours — 


features missing from the low- | 


tech HTML version. 

High-tech users view mov- 
ing graphical images the 
that are packaged with 


on 


| dozens of streaming video and 


audio clips, original animation 


| and interactive online games. 


All users can also see original 
record labels and studio pro- 
duction notes for each song on 


| 27 different pages. 


styles and content. Fifteen Web | 


development companies were 
chosen to build the site, 
Anthony Cauchi, 
media manager at EMI as the 
site was being built and now 


senior new 


Outside Line in London. Given 
that the project needed to be 
done in six months, “this ap- 
proach lets you develop a lot of | 
things at once, which is very 
handy,” he said. 

The 15 developers also em- 
ployed different graphic and 
interactive styles. “The Beat- 


said | 


One virtual reality feature al- 
lows an Apple QuickTime VR 
tour of Studio 2, where the Bea- 
tles recorded many hit songs. 
Users can stand where the Fab 
Four stood and played and see 
the other musicians in 1963-era 
black-and-white photos. 

Another feature allows a 
user to pan around a 3-D ani- 
mated city with the 
Beatles performing “Get Back” 


scene 


| atop the roof of the Saville Row 
| home of Apple Records on Jan. 
| 30, 1969. Color photos of the 
head of development at Web | 
marketing and production firm | 


| 
| 
| 
| 
| 
| 
| e 


Beatles from that impromptu 
live concert, which was their 
last, are combined with the ac- 
tual song, street sounds and 
animation of the band. 

In the Help! game on the site, 
four players assume the char- 
acters of Paul, John, Ringo and 
George. Using text chat over 
the Web, they navigate togeth- 

er through animated rooms 


| play 


| when the 
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All You Need 
Is Bandwidth 


outdoor scenes to find 
guitars and a drum. If 
| they avoid being eaten by the 
Blue Meanies (the animated 
monsters first seen in the Beat- 


| and 
three 


media software authoring tools | 


today are more efficient to use 
than earlier versions. Analysts 


| predict that animations will be 
| catapulted even further ahead 


les’ Yellow Submarine movie), 


the players enter a stage and 


a Beatles song piped in | 


from a server before a live Web | 


audience. Up to 40 people can 
simultaneously play Help!, a 
limit that was quickly reached 
game was unveiled. 
Cauchi said the site would 
have had to be built differently 
a year ago, because the Macro- 


RR Salhe Lng ee Ba 


THEIBENEEE | 


soteoomaann 





| getting very exciting,” 


ATLA SUPORTE GET BERTLEND 


with 3-D streaming animation 
rendering technology that’s un- 
der development through the 
combined efforts of Macro- 
media, Intel Corp. and NxView 
Technologies Inc. in Cary, N.C. 

“We used Flash 5 and 
Shockwave 8 
to the limit. 
That’s why it 
was a good 
time to bring 
the Beatles to 
the Web: because the 
Web medium is reaching mass 
market and the technology is 
Cauchi 
said. 

While the games and chat 
functions on Beatles.com may 
the 


stream businesses, site’s 


On the “Get 

Back” page, 

users can pan 

around a 3-D ani- 

mated city scene of the 
Beatles performing “Get 
Back” atop the roof of 
the Saville Row home of 
Apple Records on Jan 
30, 1969. Color photos 
of the Beatles from that 
impromptu live concert, 
which was their last, are 
combined with the actu- 
al song, street sounds 
and animation of the 
band playing. 


On the “Help!” 

page, users can 

play an animated 

game. Four players 

assume the characters 
of Paul, John, George 
and Ringo. Using text 
chat over the Web, 
they navigate together 
through animated rooms 
and outdoor scenes to 
find three guitars and a 
drum. If they success- 
fully avoid being eaten 
by the Blue Meanies, 
the players enter a 
stage and play a Beatles 
song piped in from a 
server before a live Web 
audience. 


were 


| points 
| users can navigate, 


} Over a 


| time. 
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navigation with animated ob- 
jects “is definitely where busi- 
nesses on the Web need to go,” 
said Rikki Kirzner, an analyst 
at IDC in Framingham, Mass. 
Businesses selling products 
on the Web will want to take 


| advantage of development tools 


to help customers rotate prod- 

ucts, walk through the prod- 

ucts’ features and explore how 
they work, Kirzner said. 

For example, 

NxView Technol- 

ogies specializes 

in providing bus- 

inesses with the 

ability to show 

their products 

Web sites from various view- 

with walk-throughs 

she said. 

Several consumer automobile 

sites already let users rotate a 


on 


| camera view of the interior of 
not seem important to main- | 


a new car model using the 
same QuickTime VR technolo- 
gy Beatles.com employs for a 
Studio 2 tour. 

The Beatles.com project 
wasn’t without technical obsta- 
cles. One difficulty developers 
faced was sharing hundreds of 
Beatles images taken from dif- 
ferent time periods across 27 


| different templates for the 27 


song pages without a central- 
ized database, Cauchi said. 

The inability to share images 
common database is 
typical of problems for big re- 
tailers and manufacturers sell- 
ing products to consumers and 


| other businesses over the Web, 


several analysts said. 

Web developer Dan Sayers 
at London-based Kleber devel- 
oped the Help! game with col- 
league Hawken-Bright Roberts 
in approximately six months’ 
They primarily used 
Shockwave and Flash, but Say- 
ers found that he had to create 
a custom tool to make the chat 
functionality work when the 
Shockwave Multi-user Server 
couldn't do the job. 

The use of online games and 
chat functionality like those in 
the Help! game is controversial 
on mainstream business sites. 
There’s limited value in post- 
ing games or chat rooms on 
a business site, Kirzner ex- 
plained, “unless you are trying 
to appeal to teenagers.” 

But some traditional busi- 
nesses say games help bolster 
the image and visibility of the 
company brand. 

For example, the Web site for 
Merck & Co. in Whitehouse 
Station, NJ., poses anatomy, 
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pharmaceutical and other med- 
ical questions in an online 


knowledge test and offers win- | 


ners free T-shirts. Moving ani- 
mations are also used to show 
basic anatomy, such as how the 
heart functions. 

“] think Merck makes good 
use of games and information 
archives to inform their poten- 
tial clientele and make evident 
their expertise,” said Scott 
Prentice, director of Web de- 
velopment at Montreal Media 
Corp., who has worked with 
many large corporations. “A 
good game creates a relation- 
ship of trust between the user 
and the company. It also helps 
to create community.” 

Not a lot of games and chat 
are used on traditional busi- 
ness sites, but they are starting 
to show up, especially to attract 
new employees or explain a 
business process, said Kipp 
Lynch, director of user experi- 
ence at NerveWire Inc., a New- 
ton, Mass.-based consultancy 


Drawing for a FREE! Workshop on the website. 


‘TECHNOLOGY — 


for business-to-business Web 
development. 
teractions can help if you are 
trying to attract cutting-edge 
recruits for your company and 
want to create the perception 
of ‘We’re not some old stodgy 
company,” Lynch said. 

“Yes, there’s a place for 
games on traditional business 
sites, but it depends on how 
they are used and targeted,” 
added Billy Pidgeon, an analyst 
at Jupiter Media Metrics in 
New York. “Developers may 
use games to build brand 
recognition, especially if you 
have a young audience or a fun 
product like food.” 

But, Pidgeon warned, “the 
real danger is that people 
might go to your site and just 
play the game and not get the 


| brand message. And while the 


new development tools are 
cheap and easy to use, they can 
cause a user’s browser to crash 
... which can drive those users 
away.” D 


“Games and in- | 


Sending Help! 
Ina Hurry 


Web developer DAN SAYERS 
built the Beatles.com interactive 
Help! game in six months with the 
assistance of a colleague at Web 
development firm Kleber. The 
game allows as many as 40 people 
to chat and play in real time and is 
found under the “Help!” song page 
on www.beatles.com and at www. 
helpgame.net. Sayers spoke with 
Computerworld’s Matt Hambien 
about the challenges 


Q: How did the development 
process go? 

A: There were no problems in devel- 
opment, just a lot of hard work over 
six months. Probably the biggest 
blind alley or rethink was deciding to 
code my own chat server instead of 
using Macromedia's . . . Shockwave 
Multi-user Server. It doesn’t, unfortu- 
nately, have the facility to manipulate 


information on the server side, which 
turned out to be vital for the project 


Q: How was the chat server 
built? 
A: | had already been working on 
simple relay chat engines in Perl, 
so coding my own server wasn't as 
much of a leap as it might sound. But 
doing things this way did, in 
fact, cause problems later 
We were unable to stress- 
test my code much before 
it went live Nov. 13. We had 
to rewrite a lot of the code 
on the fly when it went up 

As soon as it went live, 5 
it crashed almost instantly 
from all the people trying 
to get into it. The process 
of fixing the live server/ 
game was one of the most 
intense periods of my life - 
stressful and exhilarating, looking 
for bugs, panicking at the crashes, 
getting feedback. Even people in- 
side the game helped me via chat 
with improvements. 





SAYERS: Going 
live with the site 
was “stressful 
and exhilarating.” 


Q: How did you get involved 

in the first place? 

A: | had no real-world experience 

making a working chat server. My 

experience previously was coding 

Perl and [Personal Home Page] 

with databases for [Common Gate 

way Interface] applications, plus 

some JavaScript. | don’t think Kle 
ber would have even con- 
sidered taking on such a 
job if it hadn't been for 
the client. Just the idea of 
doing something innova 
tive for the Beatles’ first 
official Web site seemed 

, too good an opportunity 
faii tobe missed 


Q: What were the 
technical and con- 
tent criteria from the 
Beatles’ promoters 
about your part of 
the Web site? 

A: The only brief was very wide 
really. They just said they wanted 
peopie to do the most cool and 
impressive things they could 


oreceded by spectacular preparatio: 
_ Are you spe acularty prepared? 


.) 


if 


www.CyberSellingSecrets.com 


ivision of ipiphany — “Blinding Flashes of Internet Insight — for Sales!” 


800-890-8902 


Check the online schedule for a workshop in your area. 
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Antivirus Safety Net 
Has ‘Too Many Holes 


Despite all-out efforts to eradicate them, viruses 
remain this security manager’s costliest problem 


BY VINCE TUESDAY 
HE LARGEST RISK my com- 
pany faces for downtime 


and lost revenue comes 
from virus infections. 

Viruses used to be a nag- 

ging little problem that affected only 

those who trafficked in copyright- 

infringing software on floppies. Then 

Microsoft that 

documents should also be 

virtual machines that run 

and the 


world became a lot more 


decided 


macros, virus 
exciting. Just when we got 
our around that, 
Microsoft decided that 
e-mail clients should also 
be able to run scripts and 
that address 
should be open to all soft 


heads 


our books 


ware. 


viruses, each of them try- 
ing to spread, and many 
of them leaving damaged 
data and public relations 
woes in their wake. 

We run the best anti- 
virus defenses money can buy. We 
update our software every time the 
vendors release new patches. We spend 
a great deal of effort on the problem, 
and yet we still suffer occasional virus 
infections. Why? 


Chinks in the Armor 


First of all, we must continue to do 
business. Our development teams need 
to share code. Our sales teams have to 
send documents and presentations, our 
finance teams have to share spread- 
sheets and databases. These days, all 
these files can contain viruses. 

I remember recruiting new staff to 
address virus issues and interviewing a 
string of ex-military and intelligence 
types. Short haircut after short haircut 
explained to me that the way to eradi- 
cate the virus threat was simply to 
remove all floppy drives and CD-ROMs 
from all disable Internet 

and discipline anyone caught 
with a virus on their machine. We could 
never get away with that. 

The business benefits 


machines, 


we derive 


@ This week's journal is written by a real security manager, “ 


there are thousands ot SEGURITY 
MANAGERS 
JOURNAL 


from allowing documents and spread- 
sheets in and out of our environment 
far outweigh the of the 
rare virus epidemic that overloads the 
e-mail system or of the requirement to 
go to backups to recover some corrupt 
files after an infection. 

Of course, we work to reduce the risk 
as much as we can. But best efforts 


downside 


don’t give us 100% protec- 
tion; 
chink in its armor. Once ina 
while, a new virus finds a 


every system has a 


way through our lines of 


defense. 

In the good old days, it 
would take many months 
for a new virus to become a 
global issue, leaving plenty 
of time for virus updates. 
Today, a hacker can execute 
a few mouse clicks using a 
virus generator tool kit and 
make headlines CNN 
the same day. 

In vendors 
have developed faster ways 
to deploy updated signa- 
tures. Most are now Web- 
enabled with automatic updates and 
central management Their 
deployment packages, which push pro- 
tection onto user desktops and servers, 
could teach intrusion-detection system 
(IDS) vendors a thing or two. 

Most IDS deployments require you 


on 


response, 


consoles. 


to visit each machine in turn. That’s | 


fine when you have five machines in a 
demilitarized zone, but what if you 
have more than 4,000? Even with these 


improved tools, it still takes a lot of 


effort to deploy a new signature to 
every desktop. If the machine is turned 


through undetected. So we can’t trust 
the desktop to be timely or even there 
at all. We have to have gateway protec- 
tion as well. 

By forcing the entire Web and e-mail 
content in and out of the company 
through gateways, we can check it all in 
one place. This used to be foolproof: 
Keep it up-to-date and you'd never have 
a virus. People even began to wonder if 
we needed desktop protection at all, 
with such good border protection. 

Then, like good security people, we 
improved the confidentiality of our 
users. Shopping online? Use a Secure 
Sockets Layer encrypted session to 
protect your credit card from prying 
eyes. Sadly, our gateway protection is a 
type of prying eye. If users encrypt, we 
can see nothing and can do nothing to 
help them keep viruses at bay. 

The same problem affects the use of 
Web-mail services like Hotmail. We en- 
courage staff to use these to reduce the 
risk of company liability. If they are go- 
ing to say something foolish, we prefer 
that our company name not be associ- 
ated with it. While our e-mail servers 
have antivirus software installed, many 
Web-mail providers don't. If they use a 
decent Web-mail provider, like Hush- 
mail, the content is protected, so the 
virus gets through our proxy Web 
checking. Microsoft doesn’t bother to 
encrypt the session containing your 
e-mail on Hotmail. That’s bad for your 
privacy but great for our ability to 
check for viruses. 

Viruses also have a nasty habit of 
coming back to bite you after you think 
you have cleaned them out. After our 
last vbs infection, we cleaned all the 
Windows NT file servers, and yet the 
virus was still active. It had sneaked 


| onto some OpenVMS Pathworks and 


off or the user has disabled the virus | 


checker, then you're still exposed. 
As the number of virus signatures 


grows, the desktop virus scanner runs | 
slower and slower, tempting users to | 
disable it. Vendors have tried to work | 


around this by limiting what they scan: 
They usually just look for program files 


— the .exe, .com, vbs and .doc files | 
known to contain viruses. This means | 


that, even with all the latest signatures 
loaded and the desktop antivirus soft- 
ware enabled, infected files can still get 


Unix Samba file servers. It’s very hard 
to get decent antivirus software for 
these operating systems because they 
rarely have viruses of their own. 

Once all that was cleaned out, the 
virus was still hiding on our backup 
tapes. When we restored the files, we 
found ourselves introducing a threat 
back into the environment. The worst 
time to suffer a virus problem is when 
things are bad enough that you need to 
go to backups. 

Any attempt to reduce the risk of 
viruses also decreases the ease and 
functionality for users. Luckily, hardly 
anyone uses vbs files for business pur- 
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THISWEEK’SGLOSSARY 


Virus generation tool kit: Software 
available on the Internet that allows 
low-skilled wannabe virus writers to 
create viruses. One of these tool kits, 
called Visual Basic Script Worm Gener- 
ator, was used to create the recent 
Anna Kournikova virus. 


Secure Sockets Layer: SSL consists 
of a set of cryptographic protocols that 
use public-key technology to authenti- 
cate the site you are visiting and encrypt 
the data stream to keep the data trans- 
mitted confidential and unmodified. 


Morris worm: A program written by 
Robert Morris Jr., a student at Cornell 
University in Ithaca, N.Y., that spread 
across the Internet in November 1988 
and crippled large parts of it. 


Melissa virus: This launches itself 
when a user opens an infected Micro- 
soft Word 8 or Word 9 document. It 
prompts Microsoft Corp.'s Outlook 
e-mail program to send an infected 
document to the first 50 addresses in 
a victim's address book. 


Love Bug: A Visual Basic script worm 
sent as an e-mail attachment. The mes- 
sage’s subject contains “I Love You.” It 
propagates itself to all addresses in a 
victim's address book. 


LINKS: 


www. hushmail.com: Dublin-based 
Hush Communications is a Web-mail 
company that takes security seriously - 
perhaps even a little too seriously. It's 
for paranoid people like me. 


www.vmyths.com/index.cfm: Can't 
tell your AOL4Free.com from your Love 
Bug? VMyths.com, Rob Rosenberger's 
virus myths home page, will help you 
separate fact from fiction. 


| poses within our company, so we have 
| been able to disable the running of 
| these files on desktops. This makes us 
| immune to any variants of the Love Bug 


virus, but it doesn’t mean we feel safe. 
So far, the viruses making global head- 


| lines haven’t carried significant pay- 
| loads, but everyone working in this 


field can imagine an Armageddon virus 
that would make the famous Morris 
worm look like a tempest in a teacup. 


| Viruses have become a fact of modern 


computing life, and they don’t look like 
they're going away anytime soon. 

Do you have a trick that saved you 
from viral nightmares? I welcome your 
thoughts in the Security Manager’s Jour- 
nal forum at www.computerworld.com. D 


Vince Tuesday,” whose name and employer have been disguised for obvious reasons. It's posted weekly at www.computerworld.com to help you and our security manager 
better solve security problems. Contact him at vince.tuesday@hushmail.com or head to the Security Manager's Journal interactive forum. 
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Enterprise 


An innovative approach to PC design | 
and deployment simultaneously im- 
proves manageability, helps unclut- 
ter the office and turns your network 
inside out. By Russell Kay 


EMEMBER the thin- 

client/fat-client 

debate of a few 

years ago? Do you 

recall the under- 
whelming appearance of de- 
vices such as Net PCs, network 
PCs and diskless worksta- 
tions? Those machines often 
cost more than PCs while de- 
livering less capability, and 
they generally bombed in the 
marketplace. 

Much of the impetus for the 
thin-client model was its prom- 
ise to solve one of the persistent 
headaches IT and help desk 
staffers face: having to travel to 
a user’s office or desk to trou- 
bleshoot a PC problem. 

Plenty of vendors have tried 
to resolve this by offering a va- 
riety of remote-management 
products, but the 
tools really only work when 
there’s a software problem. To 
repair, replace or upgrade a 
physical component, you still 
need to trek out to the user. 

A small company in Austin, 
Texas, looked at this problem 


software 


differently and came up with | 


an innovative solution. 





ClearCube Technology Inc. 
created its C3 architecture, 
which comprises an entire 
Wintel PC on a single card 
(called a CPU Blade) that’s de- 
signed to fit on edge into a 5.25- 
in. high rack-mountable enclo- 
sure (called the Cage) that 
holds eight Blades. A typical 
6-ft. by 19-in. rack can hold a 
dozen such Cages for a total of 
96 PCs. 

LEDs on the front panel in- 
dicate power and hard-drive 
status for each PC, while a Cat- 
egory 5 Ethernet cable on the 
back panel goes out to the 
user’s desk, connecting to a 
small black box (called the 
C/Port) that contains connec- 
tors for the user’s monitor, key- 
board, mouse and serial port. 
The serial port is handy for 
personal digital assistants. An- 
other C/Port model primarily 
Universal 
(USB) connectors. 

ClearCube has 
patents in the area of data 
transfer over copper wire, and 
its technologies allow all the 


uses 


several 


needed signals, including video | 
and USB, to be extended as far 


Serial Bus | 


as 200 meters from the Blade. 
Each user still has a dedicated 
CPU, RAM, network interface 
card, hard drive or drives, and 
graphics board on his Blade. 
One of the interesting con- 
sequences of ClearCube’s ar- 
chitecture is that it really does 
turn your network inside out. 
A typical corporate LAN has a 
bunch of servers in a con- 
trolled environment that con- 
nect to the outside world on 
one side and to all the corpo- 
rate users on the other side. 
Long cables carry network 
traffic to and from the servers. 
ClearCube’s design, however, 
puts the PC. in the same room 
as the servers. To hook them up 
to the LAN, all that’s needed is a 
short cable for each PC. The 
long cable that used to be the 
user’s network connection is 
now the bridge between the 


user’s desk and his PC. Clever | 


engineering allows an analog 
video signal to be carried over 
three of the cable’s four twisted 
wire pairs, while all other I/O 
travels through the fourth pair. 


Why Centralize? 


Although it seems strange at 
first, this arrangement has sev- 


eral advantages. It keeps PCs | 


physically 


the ability to back up user PCs. 
The Blades have jumpers on 
them that allow IT staff to dis- 
able some components or capa- 
bilities, such as the use of re- 


accessible to IT | 
staffers at all times and gives IT | 


movable storage devices at a 


| user’s location, to prevent him 


from installing unauthorized 
software or removing propri- 
etary data, for example. 

When the user doesn’t need 
a computer tower nearby, he 
may be able to get by with a 
smaller workspace. This can be 
especially important in densely 
populated call centers, cus- 
tomer service centers and sup- 
port operations, as it also re- 
moves the heat and fan noise of 
PCs from those environments. 
Not having the computer 
handy also means components 
inside the box can’t go home 
with a dishonest employee. 

Finally, what happens when 
a user’s PC crashes or suffers a 
hardware failure? With Clear- 
Cube’s architecture, as long as 
data is stored on a network 
server, an administrator can 
quickly switch that user to a 
spare Blade without having to 
directly touch either the failed 
or spare PCs. 

The ClearCube approach to 
PCs will be slightly more ex- 
pensive than installing stan- 
dard PCs. The Blades are rea- 
sonably priced, compared with 


the cost of standard PCs, but IT | 


will also have to buy Cages, 


racks and C/Ports. Still, the im- | 


proved security, reliability and 


ability to swap in spare PCs | 
reduce the | 


should together 
total cost of ownership. For 
more information, visit www. 
clearcube.com.D 
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THIS RACK can 
hold as many as 
96 PCs. 


ONE COMPLETE 
Blade offers a user 
an entire PC. 


THE DESKTOP 
box connects via 
Ethernet cable 
to the centrally 
located PC. 


THE CAGE holds eight 
Blades that can be 
easily removed. 
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VERYONE HAS HEARD this loca- 

tion-technology marketing 

vision: You pass a coffee shop, 

and your cell phone or wire 

less handheld alerts you to 
rush inside to get 25 cents off a lus- 
cious mocha latte. 

Businesses could buy autolocation 
services that would let lost executives 
click on a million-dollar client's name 
and get driving directions to his office; 
other services could help construction 
companies keep tabs on heavy equip- 
ment or enable caregivers to track any- 
thing from pets to patients with Alzhei 
mer’s disease 

Some shipping and car companies 
have been using private automatic- 
location networks for years. Detroit- 


Awireless phone receives 
signals from GPS satellites and 
calculates the phone's location 


\ 
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Need to Find 
ACustomer’? 


based General Motors Corp.’s OnStar 
subsidiary, for example, has offered a 
location service in cars over Verizon 
Wireless’s analog network since 1997. 
The service now boasts | million sub- 
scribers, with several automobile mod- 
els equipped with OnStar. 

Some services that are in develop 
ment would be available over public 
wireless networks and the Internet. 
But several analysts warn that we’re 
perhaps three years away from seeing 
generally available autolocation sys 
tems operated by wireless public carri 
ers that would allow companies to 
push ads or services to devices based 
on users’ locations. 

Why is it so far off? Partly because 
technology standards are still develop- 


ing, and the user interfaces on hand- 
held devices are extremely limited, IT 
managers and analysts say. 

Launching a location-based service 
means not only adapting internal net- 
works and applications, but also nego- 
tiating with carriers for everything 
from connection costs and privacy 
policies to spam prevention. 

Also important is the placement of 
a logo on the menu screen of the wire- 
less service so customers can easily 
find it. Screen placement is the kind of 
detail that sounds trivial to developers 


but is vital for a service to reach a large 


pool of road warriors. Users generally 
refuse to punch in long Web addresses 
on awkward cell phone keypads, says 

Donald Black, director of e-commerce 


Locating Wireless Callers 


The FCC has required carriers to develop ways for emergency personnel to find cell 
phone users automatically, allowing for either handset- or network-based methods. 


© 


The voice call and 
location data are 
received at the antenna 
and forwarded to the 
carrier's switch. 


Auser places a 911 call with 
his handset, transmitting 
both a voice signal and the 
location data. 


Handset location method: one example of handset-based location technol- 
ogy uses the GPS network and GPS-receiving circuitry inside the handset to establish the origin of a 
911 call. The GPS electronics determine the phone's position in conjunction with several GPS satel- 
lites, and the information is forwarded to the carrier's switch and then to public safety personnel. 


e 


Acarrier’s antennae 
receive a signal and 
determine the angle 
from which it's arriving. 


45° 


Auser places a 911 call 
with his handset. 
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at the United NetWorks e-commerce 
and wireless division of air carrier 


| UAL Corp. in Elk Grove Village, IIl. 


Even though the reality of wide- 
spread location services is far off, the 
market buzz over location-based ser- 
vices has begun because dozens of pri- 


| vate companies want to build applica- 
| tions atop Enhanced 91] capabilities, a 


set of emergency autolocation services 


| that the Federal Communications 


Commission has ordered carriers to 
begin offering as of Oct. 1. Full rollout 
isn’t required until Dec. 31, 2005, but 
analyst Alan Reiter at Wireless Inter- 
net & Mobile Computing in Chevy 
Chase, Md., predicts that all the major 
wireless carriers will ask for exten- 
sions to the October deadline. 


60° 


AOA equipment 


combines angle data 


from at least two 


towers to determine 


location of a unit. 


Network-based location method: the network-based solutions don’t 


require satellites but rely on the handset's position in relation to cellular towers. This can be based on the 
angle from at least two towers, the time the signal arrived at one tower compared with the next one or the 
pattern of signals received by towers, which are compared against a database of signal patterns. 
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The FCC is pushing carriers 


to enhance their ability 


to find 


cell phone users, but providers 
and their potential customers 
question whether sophisticated 
autolocation services are 


practical or even worthwhile. 
By Matt Hamblen and Bob Brewin 


Current cell phone networks can 
locate a user based on the closest cell 
phone tower, to within a distance rang- 
ing from several hundred feet to miles. 
The FCC mandates are designed to 
bring emergency crews much closer to 
a person in need, although private 
application providers are unsure how 
important this precision will be. For 
example, SnapTrack Inc., a division of 
Qualcomm Inc. in San Diego, is per- 
fecting technology to locate users 
within 2 meters using Global Position- 
ing System (GPS) satellites as well as 
network-based triangulation. GPS 
chips, meanwhile, have shrunk to the 
size of postage stamps, which could 
make it that much easier to build pre- 
cise location sensors into phones, cam- 
eras and other devices. 

Despite the difficulties, the payback 





for such services could be attractive. 

A market forecast from research firm 
IDC in Framingham, Mass., predicts 
that U.S. revenues for location services 
will be at $4.8 billion by the end of 2004, 
with 156 million subscribers. Cahner’s 
In-Stat Group in Newton, Mass., is 
more conservative, predicting $3.8 bil- 
lion in worldwide revenues by 2005. 

Working applications such as OnStar 
show not only that the services could 
work, but also that at least some con- 
sumers are interested, says Ken De- 
laney, an analyst at Gartner Inc. in 
Stamford, Conn. 

It’s so early in the development of 
location-based services that carriers 
really haven't set charges for advertis- 
ers or service providers that want 
users’ location data. Analysts say part 
of the reason is that wireless carriers 
don’t know or won't say how much it 
will cost to put in a network-based or 
handset-based location service. 

It’s also unclear which cost models 
would work. Some end users might 
pay for map-based location and direc- 
tional services, for example. Others 
might demand free service but agree to 
view a certain number of ads aimed at 
their specific interests and age groups, 
advertisers and analysts say. 

“If location services are priced too 
high, I wouldn’t want them,” says John 
Siewierski, CEO of Boulder, Colo.- 
based GearDirect.com LLC, an online 
and brick-and-mortar sporting goods 
retailer that just finished a wireless ad- 
vertising trial with 1,000 users. How- 
ever, using location services could be 
valuable for GearDirect if the company 
were able to send an advertisement for 
skiing or biking equipment to a user 
who was just about to leave for an out- 
ing in the wilderness, for example. 

“Users could see that our prices 
were definitely less than buying gear 
in the mountains,” where you end up 
paying a higher price, he says. 


~ TECHNOLOGY 


rather than just let the wireless cus- 
tomers identify their own locations. 

Morgan Littlefield, special events 
manager for Major League Baseball in 
New York, has used free software sup- 
ported by ad revenue on her Palm V 
handheld for six months. As she trav- 
els, she uses it to help her get around 
and locate restaurants arid services. 
The software is from Vindigo Inc. in 
New York, which has about 400,000 
registered users. 

Littlefield says she isn’t sure she 
would ever want Vindigo to “find” her, 
especially since the service is good at 
finding subway stops and nearby 
restaurants when she plugs in a city 
name and a cross street manually. 

“Autolocation is not the Holy Grail 
of location,” says David Joerg, presi- 
dent of Vindigo. He says that so far, his 
service has flourished mostly without 
autolocation. 

Food.com Inc. in San Francisco has 
offered a location service on its wired 
Web site for four years. The service 
lets customers plug in their locations 
and then offers a list of restaurants that 
are part of its takeout-food network. 
The company will add wireless and 
location services within the next two 
to four years, says Chief Technology 
Officer Steven Reiss, adding that he’s 
in no rush. 

Tom Stockham, president of emerg- | 
ing markets at Ticketmaster Corp. in 
Los Angeles, says providing autoloca- 
tion services to movie ticket buyers to 
help them find nearby theaters is fine, 
but it raises a concern about how users 
will pay for and receive an easily rec- 
ognizable ticket. 

“How does somebody receive con- 
firmation they got a ticket” that a box 
office will accept? Stockham asks. 
“{Autolocation] will become meaning- 
ful and useful eventually, but it won’t 


| be in the next nine months.” 


| eral Trade Commission has held work- 


| bel, a lawyer at the Electronic Privacy 


Glossary 


Angle of arrival (AOA): A system that 
calculates the angles at which a signa 
arrives at two base stations from a 
handset, using triangulation to find 
location. AOA works poorly in urban set 
tings, where buildings interrupt signals 


Enhanced observed time difference 
(EOTD): A network-based system for 
finding handsets. Transceivers send a 
signal to the handset, which collects 
timing information on the incoming sig 
nals and bounces the data back. The 
network then calculates the distance of 
the handset from each tower and uses 
triangulation to determine location 


Time difference of arrival (TDOA): A 
network system that involves special re- 
ceivers on cell towers that calculate the 
time it takes a signal to arrive. Three tow- 
ers must receive the signal to calculate 
the difference in arrival time of the signal 
at each tower to determine the handset’s 
position through triangulation 


Global Positioning System (GPS): The 
best-known location system. It requires 
GPS satellites orbiting earth to commu- 
nicate with GPS chips in handsets. GPS 
encounters trouble in urban settings, but 
carriers can enhance it with network 
technology. A GPS handset requires a 
second antenna 


Location pattern matching (LPM): A 
network system that requires only one 
cell tower. The tower takes the signal it 
receives from a handset and compares 
it against a database of the previously 
gathered signal fingerprints that vary 
depending on the terrain. Carriers need 
to update the fingerprints of signals as 
buildings are built in a city 


Many corporations investigating 


| autolocation are relying on outsourc- 


Privacy and Government 
Public interest groups and some 
lawmakers are already worried about 
privacy with autolocation [Computer- 
world.com, Feb. 13, 2000]. Several bills 


| affecting location privacy have been 


introduced in Congress, and the Fed- 


shops to hear concerns. 
“Location is the hot privacy issue of 
the new millennium,” says David So- 


Information Center in Washington. 
Sridhar Ranganathan, general man- 
ager of Yahoo Everywhere, a division 
of Yahoo Inc. in Santa Clara, Calif, 
says he believes that letting customers | 
input their own locations will help 
overcome privacy worries. By letting 
them give up that information each | 
time they need the service, rather than | 


Carriers are also unsure how many | having their locations monitored auto- | 


location-service providers would pay 
to automatically locate their customers, 


matically, customers feel they have | 
more control, he says. 


ing firms to set up their location-based 
services because of the complexities of 
dealing with privacy concerns, multi- 
ple carriers, probable FCC delays in 
implementation, and conflicting or in- 
sufficient technology standards. 
Coca-Cola Co. in Atlanta launched 


| a location service last year with Go2 


Systems Inc. in Irvine, Calif. “We're in 


| the soft drink business, not the soft- 
| ware business,” explains Coca-Cola 
| spokeswoman Kirsten Witt. 


Gartner’s Delaney says outsourcing 
can help because carriers have “not 


| put standards on a high enough level 
| and only care about what works or 


doesn’t work in their system.” 
Meanwhile, developers whose appli- 


| cations have to work with several sys- 


tems may prefer to hire outsourcers to 
tackle interoperation on networks that 
aren’t yet built, whose standards aren't 
yet set and whose goals are still, well, 


| up in the air. D 
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Insecu 


rOLEN CREDIT CARD num- 
bers, hacked federal computer 
systems and other high-pro- 
file online assaults have put 
many users on their guards 
and focused the attention of security 
managers on high-level intrusion- 
detection systems, chains of firewalls 
and other high-level defenses. But many 
forget that, no matter how hard they try 
to secure a site, vulnerabilities built 
into the fabric of the Internet still leave 
them at risk — even though measures 
to shut down the most glaringly com- 
mon vulnerabilities are easily available. 

Simple functions like the ability to 
request a connection between two ma- 
chines can create openings that are to 
blame in about 15% of the attacks that 
are reported each year, says Fred Bak- 
er, chairman of the Internet Engineer- 
ing Task Force. That’s because TCP/IP 
hasn’t changed much since the days of 
its acceptance as the Arpanet transport 
protocol. 

“[Internet Protocol] was originally 
written among a cohesive community 
that had significant internal trust. By 
default, IP applications assume they 
should trust people,” Baker says. 

Denial-of-service and data hijacking 
attacks using functions of TCP/IP can 
be prevented using security functions 
that can be turned on in most server 
operating systems, filters built into 
routers or a new version of IP (Version 
6), which is a standard for the public- 
key infrastructure IPSec protocol. 
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The features that make the Net work are also 
the ones that sometimes allow hackers to 
shut parts of it down. Most networks are pro- 
tected against high-level hacks but are miss- 
ing the easy counters that would stop basic, 
but devastating, attacks using the built-in 
weaknesses of IP itself. By Deborah Radcliff 


But those security measures are of- 
ten ignored. 

Take the TCP attack that was “redis- 
covered” in March by security services 
firm Guardent Inc. in Waltham, Mass. 
Guardent researchers figured out a 
new way to exploit an old problem 
with TCP: the ability of a hacker to hi- 
jack a session if he can guess the ran- 
dom initial sequence number (ISN) 
that two machines use to start a se- 
quence of packets. 

Once an attacker guesses the ISN, he 
can redirect the packets or inject any- 
thing into the data stream. Software 
vendors were thought to have averted 
this problem with random packet se- 
quence generators. Turns out those 
random sequences aren’t so random 
after all and actually contain patterns 
that make the ISN easy to guess, says 
Jerry Brady, vice president of research 
and development at Guardent. 

Another ancient exploit, spoofing IP 
addresses, is also common today, says 
Paul Raines, head of global informa- 
tion risk management at Barclays Cap- 
ital, an investment bank in New York. 

“Classic TCP/IP attacks such as IP 
spoofing and denial-of-service attacks 
using buffer overflows are still out 
there,” he says. “Take the [distributed 
denial-of-service] attack executed by 
Mafia Boy last year. He planted Trojan 
horses in unsuspecting servers. Those 
servers then flooded e-commerce sites 
with a load of service requests that 
contained bogus-source IP addresses. 


The e-commerce sites couldn't keep 
up. That caused many of their servers 
to crash.” 

Non-IP attacks typically go after vul- 
nerable ports, services in server soft- 
ware or functions like address books 
and automailers. 

Traditional attacks against TCP/IP 
fall into two categories: denial of ser- 
vice and data hijacking, says Frank 
Heidt, managing security architect at 
security consulting firm @stake Inc. in 
Cambridge, Mass. 

In the 1980s, dozens of types of at- 
tacks against TCP/IP ravaged the 
Arpanet. Of those that still exist today, 
the most common include: 

1. Smurf attacks: A denial-of-ser- 
vice attack named after the colorful 
cartoon characters, a smurf attack 
takes advantage of the ability in most 
servers to broadcast requests to many 
other machines at once. The attacker 
forges a legitimate IP address and then 
broadcasts requests for a reply to the 
address of the victim to all the servers 


| on the network. Because the packets 
| appear to be legitimate requests from a 


known address, all systems in the am- 
plifying network reply to that address, 
overwhelming the legitimate machine 
and causing denial of service. 

2. SYN Floods: denial-of-service 
attacks in which the attacker uses 
spoofed IP addresses to send multiple 
connection (SYN) requests to the tar- 
get. The target system then sends ac- 
knowledgements and waits for replies. 
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Because the forged IP address 
es don’t belong to any actual 
machine, there is no reply, 
leaving connections open and blocking 
legitimate traffic. 

3. Source route manipulation: a 
denial-of-service and data-hijack 

tack in which an attacker manipulates 
routing table entries (usually at the 
border router) to redirect traffic in- 
tended for one site to a different one, 
where the information can be inter- 
cepted, or to nowhere. 


Blocking and Filtering 

Disabling “broadcast” at the border 
router can block Smurf attacks. Timing 
out incomplete SYN requests at inter- 
vals of three seconds or less usually 
wards off SYN floods. And IP route 
packet filtering can catch hijacking at- 
tempts. In fact, filtering is what 
ICP/IP protections are all about, say 
IT professionals. 

For example, many victims of recent 
distributed denial-of-service attacks 
are now filtering traffic at their Inter- 
net service providers rather than wait- 
ing for the flood to hit their own ma- 
chines. Some have also configured 
their operating systems to time out 
SYN requests faster and are changing 
the IP address of a server under a de- 
nial-of-service attack to move it out 
of harm’s way, Raines says. 

Bill Hancock, chief security offi- 
cer at Exodus Communications Inc. 
in Santa Clara, Calif., says that, in ad- 
dition to firewalls and intrusion de- 
tection, his organization uses the fol- 
lowing filtering techniques: 
® Edge-router filters to block traffic 
from bogus addresses or SYN attacks 
at the edge of the network. 
® Rate-limiting filters to stop incoming 
connection requests to protect against 
high volume attacks 
® Traffic-flow analysis to detect in 
bound connections that match known 
attacks or to backtrack to source for 
prosecution. 
® Traffic and Domain Name System 
(DNS) redirection to redirect attacks 
coming at them via high speed hard- 
ware aimed at the DNS server. 
® Host-based firewalls to protect 
against direct denial-of-service attacks 
by filtering out known types of attacks. 

But organizations like Hancock’s are 
the exception rather than the norm. 

“These security features aren’t in the 
default configuration. IT people don’t 
turn them on because they're too busy 

. or they just don’t know about 
them,” says Ian Poynter, president of 
Jerboa Inc., a security services firm in 
Cambridge, Mass. “Or they’re afraid 
filtering is going to slow them down. 


But these features don’t create much of 


a performance hit.” 

For example, Cisco Systems Inc.'s 
routers contain a feature called unicast 
reverse-path forwarding check, a re- 


6 


verse IP lookup capability that ha 

been part of Cisco’s Internetwork 

ing Operating System (IOS) s 

the release of Version 10 thr 
ago. The function can dete 
traffic by checking upstre 
tables to see if pac kets are 
from the IP address they cl 

Barbara Fraser, a consulti 
neer at Cisco, says that w 
technologies are almost ubiquitou 
“People just aren’t using them 

Concerns over performance pr 
lems are also to blame for the new 
threat to ISN guessing, accor 
Brady. The vendor community 
chance in 1996 to adopt a more 
random sequence generator, 

a standards modification titled 
RFC1946 by Steve Bellovin, a fel 
AT&T Labs in Florham Park 
“most vendors didn’t want to m¢ 
RFC1948 because it was more 
terms of CPU usage,” says Bra 

Also being widely ignored is IPSec 
subset of IPV6, which is des 
use public keys to authenticate ma 
chines before making a connectio 
says Baker. These enhanced s« 
features, both of which were pu 
in 1998, would help solve 
TCP/IP security problems 
the issue of ISN guessing, say 

and Brady 

‘Everybody [in the ve 
community] has IPSec or 
road map, but nothing’s av: 
today,” adds Patrick Grossetete 
Cisco’s IOS product manager 
Poynter and Raines suggest 
that the business community hast 
seen a compelling reason to move 
ward with IPSec or IPV6, especi 
with virtual private network tur 
performing pretty much the same 
function as IPSec 

Besides, upgrading to IPV6 presents 
the classic chicken-and-egg problem, 
adds Poyn 
upgrade to IPV6 at the s. 
erwise those that migrate 
access to parts of the Internet due to 
compatibility issues. 

But sometime soon, ther 
unavoidable business driver to uf 
grade to IPV6: a need for more 
dresses, says Mark Himelstein, vic¢ 
president of engineer at Sun Mi 
crosystems Inc 

IPV4 can 


es, but V6 


ternet appliances sweeping in, the 
need for address space will soon ex 
plode. With the larger IP addresses 
the V6 standard, Himelstein adds 
“there’d be enough IP add 
every molecule on the pl 

The need for deeper fil 
security will also explode, Him« 
says. Otherwise, any Intern 
ed device, even Grandma’s ft 


could someday hack the 
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Intrusion Detection 


Intrusion detection is the art and science of sensing 
when a system or network is being used inappropri- 
ately or without authorization. An intrusion-detec- 
tion system (IDS) monitors system and network 
resources and activities and, using information gath- 
ered from these sources, notifies the authorities 
when it identifies a possible intrusion. 


BY PETE LOSHIN 
REWALL is like hav 
ing a security guard at 
your office door, check 
credentials of 


ing the 


everyone coming and 
going, then an intrusion-detec 
tion system (IDS) is like having 
a network of sensors that tells 
you when someone has broken 
in, where they are and what 
they're doing 

Firewalls work only at the 
point of entry to the network, 
and they work only with pack 
ets as they pass in and out of 
the network. Once an attacker 
has breached the firewall, he 
can roam at will through the 
intru 


sion detection is important. 


network. That’s where 

There are a number of ap 
proaches that can be used for 
detecting intruders. Many ex- 
perts advise using a combina- 
tion of methods rather than re- 
lying on any single mechanism. 


Host-Based Detection 


Perhaps the most famous IDS 
is Tripwire, a program written 
in 1992 by Eugene Spafford and 
Gene Kim. Tripwire exempli- 
fies the host-based agent ap- 
proach to intrusion detection: 
Installed on a host, it checks to 
see what has changed on the 
system, verifying that key files 
haven't been modified. 

The initially in- 
stalled against a pristine host 
installation and records impor- 


agent is 


tant system file attributes, in- 
cluding hashes of the files. The 
agent software then periodi- 
cally the current 
state of those files to the stored 
attributes and reports any sus- 
picious changes. 


compares 


Another host-based approach 
monitors all packets as they 
enter and exit the host, essen- 
tially taking a personal firewall 
approach. Receipt of a suspi- 
cious packet triggers an alarm. 
Other commercial host-based 
products include Cupertino, 
Calif.-based Symantec Corp.’s 
Intruder Alert and Issaquah, 
Wash.-based CyberSafe Corp.'s 
Centrax. 

Network-based 
detection 
all packets on a network seg- 
ment, flagging those that look 
suspicious. A network IDS 
searches for attack signatures 


intrusion 


systems scrutinize 


indicators that the packets 
represent an intrusion. Signa- 
tures might be based on actual 
packet and are 
checked by comparing bits to 
known patterns of attacks. For 
example, the might 
look for patterns that match at- 
tempts to modify system files. 

Other network attacks are 
protocol-based. Attackers often 
seek weaknesses in a network 
by probing for active but poor 
ly administered Web, file or 
other servers. These port at- 
tack signatures are identified 
by watching for attempts to 
connect to network ports asso- 
ciated with services that 
often vulnerable. 

An attack with a header sig- 
nature uses malformed or illog- 
ical TCP/IP packet headers. 
For example, an attacker might 
try to send a packet that simul- 
taneously requests to close and 
open a TCP connection; such a 
packet might cause a denial-of- 
service event for some systems. 

Commercial network-based 


contents 


system 


are 


systems include Cisco Systems | 


Inc.’s Secure Intrusion Detec- 
tion System (formerly known 
as Cisco NetRanger), Atlanta- 
based Internet Security System 
Inc.’s RealSecure and Syman- 
tec’s NetProwler. 


What You Know, What They Do 


Detection systems can also 
be categorized as knowledge- 
or behavior-based. Most com- 
mercially 
are knowledge-based, match- 


available systems 
ing signatures of known at- 
tacks against changes in sys- 
tems or streams of packets on 
a network. Such systems are 
reliable and generate few false 
positives, but they can detect 


Intrusion-Detection Systems 


anomalous activity. ID systems that operate on a host to detect malicious activity are called 
host-based ID systems. ID systems that operate on network data flows are called network-based 
ID systems. These two systems can be used in conjunction with each other. 


intruders using only attacks 
they already know about. 
They're often helpless against 
new attacks, so they must be 
continually updated with new 
knowledge about new attacks. 
A behavior-based IDS in 
stead looks at actions, attempt- 
ing to identify attacks by mon 
itoring system or network ac- 
tivity and flagging any activity 
that doesn’t seem to fit in. Such 
activities may trigger an alarm 
- often a false alarm. Though 
false positives are common 
with a behavior-based IDS, so 
is the ability to detect a previ- 
ously unreported attack. 
Another intrusion-detection 
tool is the “honeypot,” a com- 
pletely 
signed to offer an attractive 
nuisance to attackers. One 
manager of a prominent Web 


separate system de- 


site often uses a honeypot to 
handle all inbound requests. 
Any attacks against the honey- 
pot are made to seem success- 
ful, giving administrators time 
to mobilize, log and track the 
attacker without ever exposing 
production systems. 

Intrusion detection requires 
considerable planning. As with 


virus detection, host-based 
intrusion detection that moni- 
tors system and file changes 
must be installed on pristine 
Otherwise, 
always the chance that the 


systems. there’s 
system has already been com- 
promised prior to installation 
of the IDS. 

It’s even more important to 
have a clear procedure in place 
for dealing with intrusions. It’s 
not always best to simply pull 
the plug once you know that an 
intrusion is under way. 

Depending on what systems 
or networks have been com- 
promised and what you want 
to happen to the attackers, it’s 
often preferable to keep the 
attackers in the system and 
contact a law enforcement 
agency to try to catch them. 
Such a decision shouldn’t be 
made in haste; a set of intrusion 
response policies and proce- 
dures should be prepared well 
in advance. You want to keep 
intruders out, but you also 
want to discover and locate 
them when they succeed. B 


Loshin is a freelance writer in 
Arlington, Mass. 


ID stands for intrusion detection, which is the 
art of detecting inappropriate, incorrect or 


The honeypot system is designed to lure 

attackers. Any attacks against the hon- 
eypot are made to seem successful, giving ad- 
ministrators time to mobilize, log and possibly 
track and apprehend the attacker without 
exposing the production systems 
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Network-based 'D scrutinizes 
all packets on a network segment, 
flagging those that might be suspi- 
cious. It looks for attack signatures - 
indicators that the pack- 
E- ets represent an intrusion 


© The host-based agent 
approach installs the ID 
ona host, then checks to see 
what has changed on the 
system, verifying that key files 
haven't been modified. 





Solomon Embaye, 27 





After 8 rad uation, most students go looking 
for jobs. At this school, 840,000 


jobs come looking for him. 


All around the world, the Cisco Networking Academy Program is turning out the skilled IT ynals that your business urgently need Cisco SYSTEMS 


Your organization can support one of the 5,500 schools and colleges b 


cash donation.* Help provide valuable learning for life in the 








eI 


~ TECHNOLOGYENERG! 


Start-up Picks Up Pace 
For Busy Web Sites 


SpiderCache speeds load times for 
dynamically generated Web pages | 


| properties such as the user’s 


BY DAVID ESSEX 
PIDERCACHE 
Vancouver, British 
Columbia, calls Play- 
ers-Racing.com the 
poster child for how 

its caching software can boost 


performance at even the most | 


dynamic, multimedia-rich Web 
sites. 


Run by VFX Digital Solu- 


tions Inc., a new-media devel- | 


opment company in Rich- 
mond, British Columbia, the 


auto racing Web site is subject | 


to peaks and valleys that can 
bring sharply heavier loads as 


fans log in to view up-to-the- | 
minute results and videocasts. | 
And the content of its Web | 


pages changes constantly. 
Speeding up those pages was 

a challenge. Dedicated content 

delivery networks from com- 


panies such as Akamai Tech- | 
nologies Inc. in Cambridge, | 


Mass., wouldn’t be much help 


in handling such content be- | 


cause they cache static pages 
that are the same for every 
user. VFX President Coniah 
Chuang chose SpiderCache 
because it can handle his data- 
base’s dynamic content. 

“The customers don’t know 
about it,” Chuang says. “They 
just know it’s quick.” 


Web Page Dynamics 
SpiderCache was hatched 
two years ago when product 
development manager and co- 
founder Michael Corcoran, 
then lead developer at educa- 
tional site Brainium, asked 


himself, “Why does dynamic | 


content need to be generated 
over and over again, when the 
same thing is being generat- 


ed?” That realization led Cor- | 


coran to design SpiderCache 
and co-found the company 


with fellow Brainium technol- | 


ogist Greg Parker last June. 


They released their first prod- | 


uct three months later. 


SpiderCache, which is avail- | 


able for Windows and Unix 
Web servers, analyzes incom- 
ing Web page requests and 


| caches page elements that site 
Inc. in | 


SpiderCache will turn your dy- 


| Web site by caching all of your 





administrators preselect. 
“In the best-case scenario, 


namic Web site into a static 
pages,” says Corcoran, who 


claims that customers see as 
much as a fortyfold perfor- 





| mance gain. The software also | 


lets Web administrators tweak 


| performance with “parameter- 
| ized caching” that lets them se- | 


lect pages for caching based on 


location and browser type. 
Another feature, called par- 
tial-page caching, provides 
more refined control. Corcoran 
says some sites can install the 
software in half an hour, with 
little or no technical support. 


The most complicated sites | 


may take two days, he says. 


Chuang raves about the 


GREG PARKER (left) and Michael Corcoran say multimedia-rich sites 
could see up to a fortyfold performance gain using SpiderCache. 


SpiderCache 
Inc. 


Location: 1661 Duranleau St., Van- 
couver, British Columbia V6H 3S3 


Niche: Caching software that 
speeds the loading of dynamic Web 
page content 


Why it’s worth watching: 
Faster Web site performance can 
keep users longer and increase 
Web site traffic. 


Company officers: 

¢ Greg Parker, CEO, president and 
co-founder 

* Michael Corcoran, product devel- 
opment manager and co-founder 


Milestones: 
¢ June 2000: Company founded 
¢ September 2000: SpiderCache 


Employees: 10; growth to 90 
employees projected for this year 





Burn money: $1.5 mil- 
lion from Itemus Inc..; 
second-round fi- 
nancing under way CO 


Products/pricing: “3 
Pricing for Spider- 
Cache 1.5 starts at 
$2,999 per CPU for Windows 

NT and 2000 and $5,299 for Unix. 
Volume discounts are available. 


oo 


Customers: ConsumerReview 
Inc., Cincinnati.com, GeekRave 
Productions Inc., Investment.com, 
NewYork.com Internet Holdings 
Inc. and VFX Digital Solutions. 


Partners: The signing of partners 
is “in process,” the company says. 


Red flags for IT: 

© lt'sasmall player ina crowded niche. 
¢ It must find more funding and part- 
ners in order to grow. 

¢ Check your Web site database 
before buying SpiderCache. Ora- 
cle9i, for example, has dynamic 
caching features. 


Profitability date: Expected 
within one year. 


| company’s 


careful, expert 


| technical advice but expresses 
a desire for setup screens that 
| make it easier to select Web 


| content. (Corcoran says a new | 


| configuration wizard in Spi- 
| derCache 1.5 will help.) 
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However, Future Shop Ltd. 
in Burnaby, British Columbia, 
scrapped a SpiderCache beta 
when it failed to handle Micro- 
soft Active Server Pages with 
“multiple levels of referenc- 
ing,” says Wayne Chow, opera- 
tions manager at the electron- 
ics retailer. A SyiderCache fix 
would have required changing 
some of the site’s original code, 
according to Chow. 

Corcoran claims that changes 
are usually unnecessary and 
blames the problem on a Mi- 
crosoft change that put Future 
Shop and SpiderCache devel- 
opers out of sync. 

Nonetheless, “we're looking 
at other solutions,” says Chow. 

SpiderCache remains a tiny 
operation, with about 10 em- 
ployees. Parker, now CEO and 
president, says he hopes a sec- 
ond round of financing that’s 
under way will let him add 80 
people by year’s end. The com- 
pany’s customer list remains 
short, at roughly a dozen small, 
content-oriented sites, but 
Parker reports even broader 
interest in SpiderCache. “We 
are getting some inquiries into 
intranets as well,” he says. 

An upgrade, SpiderCache 
1.5, arrived in mid-Febru- 
ary with image com- 
%% pression and “the abili- 
ty to monitor content 
g changes and changes 


a c Ny Yo to a site,” Parker says. 
“ 2 i ~ ce) = 
Prat Three undisclosed prod 


ucts are under develop- 
ment. Parker hints that they 
will bring dynamic caching to 
other points along the Web 
performance bottleneck. 
SpiderCache’s size could be 
its undoing, says Peter First- 
brook, a research analyst at 
Stamford, Conn.-based Meta 
Group Inc. 
“They have got interesting 


| technology, but they’ve got to 


partner with someone to get it 
out there,” he says. Educating 
customers on the value 


| caching is a hurdle, though 


Parker says high-profile, com- 
plementary vendors such as 
Akamai are helping to raise 
caching’s visibility. D 
Essex is a freelance writer in 
Antrim, N.H. Contact him at 
david_essex@conknet.com. 
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STATE OF 
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Content Delivery 
With a Twist 


SpiderCache’s market includes con- 
tent delivery networks (CDN) like that 
of Akamai Technologies, but such firms 
specialize primarily in static pages and 
streaming video. Other vendors, such 
as CacheFlow Inc. in Sunnyvale, Calif. 
put caching technology inside dedicat- 
ed network hardware. 

Few Web sites are using dynamic 
Web page caching today, says Meta 
Group analyst Peter Firstbrook, but 
“the potential in itis huge because it’s 
the Web universe - anybody that has a 
scalability or performance problem on 
adynamic Web site.” 

Michael Hoch, an analyst at Aber- 
deen Group inc. in Boston, says Spider- 
Cache’s toughest challenge may come 
from Oracle Corp., whose Oracle9i infra- 
structure suite has a dynamic-caching 
component. 

According to vendors and analysts, 
only three companies offer dynamic 
caching that, like SpiderCache’s, 
works with more than one company's 
database: 


Chutney Technologies Inc. 
Atlanta 
www.chutneytech.com 


Chutney's PreLoader is unique in 
caching down to the level of Java or 
application server components. 

Unlike SpiderCache, which resides 
oneach application server, PreLoader is 
ona separate server, so a single copy 
handles multiple Web servers. 


Persistence Software Inc. 
San Mateo, Calif. 
www.persistence.com 


Available in hardware and software ver- 
sions, Dynamai “goes way beyond 
XCache, SpiderCache and Chutney,” 
claims Chief Technology Officer Jim 
Barton. 

Itcan sit behind firewalls, in front 
of servers or out on the network, he 
says. However, its price of $25,000 per 
server CPUis nearly five times that of 
SpiderCache. 


XCache Technologies 


www.xcache.com 


President and CEO Wayne Berry ac- 
knowledges that XCache and Spider- 
Cache are “very similar” but claims that 
XCache 2.0, expected in June, will dif- 
ferentiate itself with new CDN support 


| and compression features. 


~ David Essex 
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TECHNOLOGY 


Software Linguist 


To appreciate the role of a senior 
software architect, it helps to think 
in terms of language and expres- 
sion. By Sharon Watson 


LOU COGLIANESE says his interest in languages has helped him in his 
role as chief software architect at Capital One: “I appreciate the value 
of being able to express things in different ways.” 


Summary 


THEME: Job Watch 


TOPIC: Senior software 
architect 


KEY POINTS: Comprehen- 
sive knowledge of software 
architectural models, pro- 
gramming languages and 
systems are stil prerequisites. 
However, what makes a 
senior architect distinct and 
more desirable in a corporate 
setting is the ability to create 
software architectures that go 
beyond technical elegance to 
help a company compete 
more effectively. 


I'S TEMPTING to com- 


pare a 


are concerned with de- 
sign and structure, though 
their final products are very 
different. 


But Lou Coglianese, chief ar- | 


chitect at enterprise architec- 
ture at Capital One Financial 


Corp. in Falls Church, Va., de- | 


scribes his role in terms that a 
linguist would appreciate. 

“I appreciate the value of be- 
ing able to express things in 
different 
anese. Whether working with 


| SQL, Java or a particular soft- | 
| ware architecture methodology, | 
Coglianese says he sees each as | 


a language with its own 


senior software | 
architect to a building | 
architect. After all, both | 


ways,” says Cogli- | 


strengths in communicating dif 
ferent types of ideas 

That’s not so surprising; al 
though he studied math as an 
undergraduate and later earned 
a master’s degree in chemical 
engineering, Coglianese ma 
jored in French language and 
literature. “I've always been a 
language person,” he explains. 
“How I express myself is an 
important part of who I am.” 


Coglianese’s combination of 


technical and linguistic skills 
has been invaluable in a variety 
of professional situations. 
These include ordering dinner 
in French in a restaurant in 
Italy for English-speaking col- 
leagues and translating Capital 
One’s business objectives into 
systems requirements. Those 
are the multilingual skills that 
more companies are looking 
for in their senior software ar- 


| chitects. 


| Software Grammar 


As chief software architect, 


| Coglianese’s work is akin to 
that of a linguist codifying the | 
| grammar for a newly discov- 


ered language. At Capital One, 
the language is a 
need, and the grammar is the 
architectural model. 

“An architecture starts with 


business 


| needs and a vision: What do 


we hope to achieve; what value 


do we need the system to bring | 


us?” Coglianese says. Then it’s 


a matter of selecting the right 


technologies. “It’s not about 
putting the latest and greatest 
together but of looking at the 
business drivers and how they 
map to the components of the 
architecture,” he says. 

In addition to meeting im- 
mediate end-user needs, soft- 
ware architecture must 
account for the way in which 
future changes and additions 
will be incorporated into its 
design and the way that the 
system will be produced, main- 
tained and upgraded. 


also 


Creating such architectures | 


requires deep technical knowl- 
edge. “You need a detailed un- 
derstanding of how things work 
under the covers,” says Cogli- 
anese. For example, to know 
how application servers will 
schedule work, a senior archi- 
tect must understand schedul- 


ing algorithms, as well as soft- 
ware like Java 2 Enterprise Edi- 
tion (J2EE), languages like Java 
and XML, and system compo- 
nents such as databases, net- 
works and security. 

Coglianese says his expo- 
sure to a wide range of com- 
plex systems during his 26- 
year career has been extremely 
valuable in acquiring such 
knowledge. Yet, he points out, 
even with his experience, he 
can’t know everything about 
every system. 

That’s why he works with 
14 other software architects, 
each of whom has complemen- 
tary strengths. One may know 
database structures particular- 
ly well, while another may be 
strong on networking and a 
third may know security. 

Coglianese’s role is coordi- 
nating the skills of this group 
of architects as they collabo- 
rate with other players on a 
project, which may include pro- 
fessionals from Capital One's 
Internet group, operations de- 
partment, call center group, 
and human resources and mar- 
keting departments. 


A Wide Vocabulary 


Current needs dictate that 


Coglianese and his team of ar- | 
chitects be very close to the | 
business users for whom they | 


design systems. “I don’t need 
to be a financial wizard, but | 
need to know the 
forces,” he says. 


With this knowledge, Cogli- 


driving 


| anese and his architects gener- | 
ate their own ideas about sys- | 


tems that could help Capital 

One. “I like to see things get 
| built, get into production, get 
| delivered,” he says. 


systems providing personal- 
ized data to Capital One's 
| 3 million customers. Compo- 


nent software like J2EE and 


|  Coglianese says that in the | 
| future, he expects to deliver | 


| languages like XML will offer a | 


| rich design base, he says. 

| “We'll be spending our time 
| on the business value of a sys- 
| tem, not on building infra- 
| structures we've built a million 
| times before,” says Coglianese. D 


| Watson is a freelance writer in 
Chicago. 


| 
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dust the Facts 


Name and job title: Lou 
Coglianese, chief architect, 
enterprise architecture 


Company and location: 
Capital One, Falls Church, Va 


How he got the job: 
Coglianese worked at IBM for 
20 years; he then did software 
architecture research and stints 
with consulting firms before 
Capital One lured him with its 
information-based business 
strategies. “IT is the central ner- 
vous system here,” he says. 
“We use IT to rocket the busi- 
ness forward.” 


Skills required: Competence 
with architecture styles, pat- 
terns and their implications; 

an understanding of perfor- 
mance-based estimates and 
capacity planning; knowledge 
of the benefits of new technolo- 
gies; a good working know!- 
edge of many programming 
languages, servers, databases, 
networks and system opera- 
tions. “You must understand 
how each aspect will work in 
the context of the entire sys- 
tem,” Coglianese says. 


Training needed: Coglianese 
says his training in math and 
chemical engineering has been 
useful, but he also credits expo- 
sure to a range of systems, from 
“classic IT operations” to so- 
phisticated systems for aircraft 
operation, radar processing and 
marine automation. As he iden- 
tifies skills he may need in 
emerging technologies, Cogli- 
anese expects to gain them via 
Capital One’s IT University. 


Job and salary potential: 
Coglianese declined to discuss 
salary specifics. However, he 
notes that Capital One offers 
many performance-based in- 
centives on top of salary and 
benefits. “You are in a position 
to make an impact, to show a 
benefit to the business, so you 
can take advantage of the 
perks,” Coglianese says. Re- 
cruiters estimate salaries for se- 
nior software architects range 
from $90,000 to $150,000. 


Advice: Coglianese recom- 
mends that aspiring architects 
gain as many skills and as much 
knowledge as possible. “You 
have to be able to work at the 
top; you have to be able to work 
at the bottom,” he says. Further, 
he urges architects to learn to 
express their architectures in 
formal designs so they're easy 
to analyze and evaluate. 
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IT Careers in Texas 


Enron Net Works 
Houston, TX 


The energy and utilities giant, Enron Corp, formed a separate 
commercial venture — Enron Net Works — just over a year 
ago. Its mission: commercialize and leverage the company's 
transaction-based and e-business platforms within the energy 
and commodity industries. “We provide services as far as 


] t 


operational and application service provision to companies,” 


explains Philippe Bibi, president and CEO of Enron Net Works 


and chief technology officer for Enron Corp 


In less than five years, Enron has become a worldwide 
player in the energy market, offering utility power and 
exchange. The transaction support role for Enron Net 
Works is also expanding to the company’s new businesses 
forest products, freight and steel. “We're building a number 
of new transaction-based systems that leverage off some of 
the building blocks we developed,” says Bibi. “The essence 
of the commodities market is a bit different, so we are 
creating new solutions from the logistics and entry 


management perspectives 


Quite frankly, it's nice for an IT professional to come in and 
look at green field projects in development versus patching 
code,” Bibi adds. In 2000, this challenge attracted more than 
550 new employees. Among the successful hiring programs 
is Enron Net Work’'s College Graduate Recruiting Program 
New college graduates enter a two-year program in which 
they rotate to new opportunities every year, crossing Enron 
companies and getting a chance to experience the varied 


technologies used 


Bibi says successful candidates tend to have degrees in 
electrical engineering or computer science. “We also are 
looking for people who have a good understanding of how 
this business works,” he says. “Our development model places 
traders, accountants, operational employees and the IT staff 
on teams, so interactive skills and the ability to learn the 
business quickly are important. Our top performers tend to be 


fully conversant in the business, not just in technology 


‘In this market, we are by far leading the pack in our IT 
reputation,” Bibi notes. “It's a network of sophisticated 
infrastructure and solutions. If you want to learn and grow, 
you will be in an environment that is a leader. From a 
business perspective, we are on par with Wall Street giants in 


terms of our trading capability 


USAA 
San Antonio, TX 


A little over eight decades ago, USAA was formed by a group 
of military officers to provide insurance that targets the 
unique needs of military officers. Today, the San Antonio- 
based corporation has grown to offer full-service banking, 
credit, investment and financial planning services to go along 
with its highly reputed insurance 


Of USAA's 4.6 million members, fully 1.2 million of them 
clicked in to the company's new e-commerce capabilities 
in the past year. In addition to the well-known use of 
database management to better serve customers, USAA’s 
expansion in technology includes customer-service 
centers using call-center technology and leading-edge 
work in voice-over-web. “IT is the backbone of the 
business,” says Bob Morrison, director of strategic staffing 
for the IT organization. “We create and maintain custom 
programs for investment management, the federal 
savings bank and property casualty. Technology runs 


along the breadth of these very strong businesses.” 


USAA is leveraging its e-commerce capability as it benefits 
members and the businesses. “There's a combination of 
customization and implementation going on,” says Morrison 
who notes that the USAA e-commerce group has won 
awards for its site. In addition to concentrating on the 
back-end of the systems, USAA's IT experts also continuously 
improve the interface with members by testing the systems 


in a lab on site at the San Antonio campus 


IT professionals at USAA are involved in development 
networking, architecture design, consulting, security analysis 
and development, database management and system 

design. The company uses client/server and mainframe 
technology. “We believe this breadth of technology makes 
us an attractive technology challenge,” Morrison adds 

While he is recruiting individuals with technological 
expertise in these areas, he says that the “fit” is critical at 
USAA. “We want people who have experience and who have 
leadership capability, the things that indicate your character 


and well roundedness as an individual,” he adds 


We are hiring individuals for the long-term, not just for a 
job," Morrison says. “You'll grow through the business 
opportunities but also through the programs we offer to 
you.” Training Magazine rates USAA among its “Top 50 


Companies in Training and Development 


In addition to the traditional benefits, USAA’s San Antonio 
campus is a self-contained service center for employees, 
offering a medical clinic, health and recreation facilities, dry 
cleaners and florist, as well as a dinner take-out service. “We 
don't just talk about being employee-centric, we act on it 
Our IT organization enjoys a four-day work week. We want 
you to have a life/work balance. We believe that if we invest 
in our employees, we are better able to serve our members.” 
This philosophy has placed USAA on the Fortune magazine 
list of “100 Best Companies to Work for in America” every 


year since the listing began 
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Computer Systems Engineer-IBM Storage Systems sought by tech 
nology consulting & sales company in Englewood, CO to confer with 


data processing & project managers to obtain information on limitations 
& capabilities of existing system & capabilities required for data 
processing projects & projected workload. Perform detailed tape 


processing workload analysis 


including both current & projected 


workloads. Develop system design to meet current & future needs 


Analyze information to determine. 


recommend, & plan for type of 


computers & peripheral equipment, or modifications to existing equip 
ment & system, which will provide capability for proposed project or 
workioad, efficient operation,& effective use of allotted space. Provide 


pre-installation technical planning support for the installation 


of new 


system & modification of existing system. Train users, technica’ 
support staff, & technical managers in the use of the new or modified 
equipment, procedures, software tools, & practices. Monitor functioning 
of new equipment ensure system operation conforms with specif 


cations. Requires Bachelor's or 


foreign 


quivalent in Electrical 


Engineering; 2 yrs experience performing the core duties described 
),000/yr; M-F; 8am-5pm. Respond by resume to James 

imada, CO Dept of Labor & Employment, Tower Ii, #400,1515 
Arapahoe St., Denver, CO 80202, & refer to Job Order No.JL1118044 


Software Engineer sought by 
in Englewood, CO, to work in E 


21 software development company 
glewood & other unanticipated job sites 


in the U.S.., to, working with SAP R2 & R3 systems, assess the business 


requirements of clients through a feasibility study, then implement 


analyze, design, re-engineer 


ustomize business & software 


Programs to fit the needs of respective clients, using ABAP programming 
language. Provide training & documentation on SAP R3 adaptive products. 


Provide SAP system support 
development team t 
enable mn 


including troubleshooting & assisting 
ensure that employer's proprietary products will 


SAP & SAP systems to 


communicate. Create custom 


solutions us intermediate documents (IDOC)& business applica’ 


programming interface(BAP!).System administrator for multiple SAP 


development instances under ORAC 


or foreign degree equivalent 


LE database. Requires Bachelor's. 


yputer Science or related field 


(including Chemical Engineering);3 yrs experience as a software 


engineer using SAP R3 & R2 


systems; Working knowledge of 


ABAP.IDOC,& BAP!.$90,500/yr;M-F;8am-5pm.Respond by resume to 
James Shimada, CO Dept of Labor & Training, Tower I!,#400,1515 
Arapahoe St., Denver, CO 80202, refer to Job Order No. JL 1117234 


SAP Consultant (multiple openings) tc 


meet with & co 


to determine their system needs & desires; conduct business & system 


analysis to determine if existing 
analyze s/ware requirements & h/ware 
3 SAP, Oracle, Sybase, Visual Basic 
2r 2000 & Crystal Reports; provide 


mplementat f new systerr 


needs; design system while usir 


SQL*Plus, PL/SQL, JCL, Develop 


system needs modification or 


implementatic system & unit testing procedures; Reqs. Master's ir 
Comp. Sci., Comp. Engg., Comp. info. Systems, Comp. Apps., Electrical 


or Electronics Engg. or Math or 
job offered or 3 yrs related ex 


Computer Instructor. Wil 


followed by at least 5 yrs progressive exp 


educ & exp 


development & using Developer 


elated exp must 


ts foreign educ equiv plus 3 yrs exp in 
as Sr. S/ware Engr., Trainee Engr. or 
t a Bachelor's degree 


r foreign equiv 
. specialty in lieu of req'd 


include 2 yrs of system analysis. 
2000, Visual Basic & Oracle 


$78,805/yr, 40hrs/wk, OT as req'd, 8a-5p. Applicants must show proof 


of legal authority to work in U.S. Se 
ent Security, 401 S. State St. - 7 North 


to Illinois Dept. of Emp 


resumes & cover letter (no calls) 


Chicago, IL 60605 tn: Lydia Clarke, Ref. #V-IL25142-E “Employer 


Paid Ad 


ZEE TV USA, an indian Lanquage 
Cable TV Company seeks to f 
the following positions in Arlington 
TX: Software Engineer/Prograr 
mer Analyst (Multiple Openir 
Must have BS 

Software Exp 

resume to HR 


W. Abram, #200C, Arlingtor 


Systems Analysts-- The Amdocs 


Group is looking for Systems 


Analysts to manage existing 
telecommunications software 
systems & develop new 


gramming. Req'd 


t have 


Ingres 


ment. Position can be performed 


here in L Employer will 


Senior Device 
Technology Engineer 
Advanced Mi 


a Sr. Device Techr 


1ology Engir 
to work on technology 

issues in advanced technology 
development. PhD required 
Send resume to: One AMD 


Place, PO Box 3453, MS 935 


Sunnyvale, CA 94088. EOE 


Technical Analyst sought by 
titanium manufacturer in Denver, 
CO, to work in Denver & other 
unanticipated job sites in the 
U.S., while working in SAP/R3 
environment, support, maintain 
& develop applications for end 
users within the company 
through a structured methodology 
encompassing analysis, design 
construction, testing & imple 
mentation. Use ASAP (acceler 
ated SAP) methodology for 
implementation of specifications 
in the materials management 
module & the sales distribution 
module within SAP. Write & 
maintain technical specifications 
using Variant Configurator & 
Production Planning Process 
Industry(PPPI). Requires Bache 
lor's or foreign degree equivalent 
in Computer Science or Engi 
neering;2 yrs expenence working 
with SAP materials management 
module; Working knowledge of 
SAP/R3 materials management 
& sales & distribution modules 
as well as Variant Configurator 
$90,000/yr;M-F;8am-5pm.( 
openings)Respond by resume 
James Shimada, CO Dept of 
Labor & Employment, Tower 
11,#400,1515 Arapahoe St 
Denver, CO 80202,& refer to Job 
Order No. JL 1118094 


Senior Programmer. Dvip new & 
maintain existing Microsoft VB 
applics & database; provide tech 
support to end users; manage 
data backup, convert mainframe 
Jata to PC data format. B.S. in 
Comp Sci, Elec Eng, or related 

+2 yrs exp in offd or ir 
related occupation such as 
Prgmr or ilar duties under 
Jifferent job title. 2 yrs exp using 


VB; 6 mth exp prgmg 


nsurance 
s/ware. Theoretical knowledge 
practical exp in COBOL CL 
VSAM & CICS. Microsoft 
1d Visual Basic Profi reqd 
$53K/yr. Must have 
proof of legal auth to work in US. 
Send your resume to |A Work 
force Center, 215 Watson Powell 
Jr., Des Moines, iA 50309-1727 
Ref JO# 1A1101235.. Employer 
paid ad 


careers 


Programmer, Engineering. 8a 
5p. 40hrs/wk. Plan, control & 
integrate engg project, formulate 
engg prgm for tech'l dsgn & 
specs; review & test prgm per 
project objectives using COBOL 
CICS, VSAM, EASYTRIEVE 
JCL, REXX & ISPF/PDF/TSO. 
Masters or equi deg w/major in 
Electronics, Electrical, Mech or 
Comp Engg. In lieu of Masters 
Jeg candidate can have Bach 
Jeg in specified majors & 5 yrs 


of progressive exp as Prgmr 


Analysv/S/Ware Engr. Resume 
w/r/# 001 to: Joel Deal, HR Rep, 
Homeside Lending, Inc., 9601 
McAllister Freeway, Ste 350, San 
Antonio, TX 782 1€ 


Manager Software Research 
and Development sought by 


Securities Trading firm for 


Minnetonka, MN office. Must 
possess M.S. degree or equiva 
lent Computer Science 


Engineering and 2 yrs. exp. in 


software development, design. 
computer programming. Respond 
Human Resources Depart 
ment, Knight Trading Group, Inc 
Washington Boulevard 


Jersey City, NJ 07310 


IT careers and 
IT careers.com 
reach more 
than 2/3 of all 
US IT workers 
every week. If 
you need to hire 
top talent, start 
by hiring us. 


Call your 

IT careers Sales 
Representative 
or Janis 
Crowley at 
1-800-762-2977. 


iy Careers 


ITCAREERS 


where the hest 
get better 


IT careers.com 


Computerworld 


IT CAREERS 


Software Engineer sought by 
company specializing in business 
software solutions in Denver, CO 
to work in Denver & other unan 
ticipated job sites in the US 
Design and develop software 
applications and/or software 
tools that incorporate clent/server 
architecture and interface with a 
variety of relational database 
management systems, and are 
platform independent. Analyze 
requirements. Create designs 
and desigr Jocumentatior 
Code, test, and de—bug the soft 
ware applications. Engage in 
project management as required 
Use object oriented programming 
techniques and programming 
nguages C/C++, and JAVA 
in the development process 
Requires Bachelor's in come 
sci. or related field(incl. elec 
&/or elec’cs eng.);Working 
knowledge of designing and 
developing software applications 
ssing object oriented program 
ming techniques.8am-5prr 
M-F:$66,100/yr.(2 openings.) 
Respond by resume to James 
mada, Colorado Department 
Labor & Employment 
Employment & Training Division 
Tower 11,#400,1515 Ar ahoe 
Denver, CO 80202,& refer to Jot 
Order Number JL1117959 


Protech Solutions, Inc. Delivers 
Innovative IT solutions to 
business clients nationwide. We 
have immediate full time 
opportunities for Programmers 
Engineering Programmers 
Programmer Analyst, Systems 
Analyst, Software Engineers 
DBA's, Consultants and 
Software Consultants in any of 
the following areas 

LAN/ANEnterprise NW, MS 
Exchange, Web Server 
Terminal Servers, Desktor 
Deployment, Software 
Distribution, Visual Studio, Java 
C++, Oracle, Dev 2000, MTS. 
MSMQ, DCOM, Active X, SOI 

DBA, MCSD, OCP, HTML,SCYJP, 
DHTML, XML, ASP, XSL,CSS 
MCD,COBOL 

IMS,VSAM, TCL 

$/370,ES 9000,ADABAS 
Natural, ERP Systems 
SAP, Peoplesoft, Bachelor's 
Master's Degree required 
depending on position. We 
also accept the foreign 
educational equivalent of 
the degree, or the degree 
equivalent in education and 
experience. Excellent benefits 
Send resume/salary req. to: HR 
Protech Solutions, Inc 

124 W. Capitol, Suite 550, Little 
Rock AR 722 r 
HR@protechso 


MANAGEMENT ANALYST 
ANALYZES BUSINESS PRO 
CEDURES & PROBLEMS OF 
COMPANY'S ORDER ENTRY 
INVENTORY & COST CONTROL 
& PLANNING TO DEVISE THE 
MOST EFFICIENT METHODS 
TO ASSIST MANAGEMENT IN 
ACCOMPLISHING WORK 
CONVERTS ANALYSES TO 
PROGRAMMABLE FORMS 
FOR COMPUTER USE. STUD 
IES DATA HANDLING 
SYSTEMS. DEVELOPS NEW 
SYSTEMS FOR MANAGE 
MENT IMPROVE WORK 
FLOWS. CONDUCTS ANALY 
SES OF MANAGEMENT & 
OPERATIONAL PROBLEMS 
FORMULATES MATHEMATICAL 
OR SIMULATION MODELS OF 
PROBLEMS FOR SOLUTIONS 
BY COMPUTERS BS 
DEGREE, COMPUTER APPLI 
CATIONS OR INFORMATION 
SYSTEMS. 40 HR WK 
$36.45/HR. TEE TOP OF 
CALIFORNIA INC, 5623 PECK 
RD, ARCADIA CA 91006 


Sr Software Engineer 

research, design, and develop 
computer software systems 
especially 4GL-based modifica 
tions to the Symix ERP solution 
Test software/hardware configu 
rations, assist in implementing 
a SDLC 


requirements to determine fea 


Analyze software 


sibility of design within time and 
cost constrains. Must have BS in 
Computer Science and 4 yrs. 
exp. Send resume to Niagara 
LaSalle Corp., HR. Dept. 1412 
150th St., Hammond, IN, 46327 


IT) careers 


Programmer Analyst sought in 
Arlington Heights, IL computer 
consulting comp To work in 
various unanticipated locations 
throughout the U.S. Plan, devel- 
op, test and document computer 
programs including client server 
application. Analyze client 
requirements to determine soft 
ware modification requirements 
Implementation of software pro 
jects; writing batch files. Use of 
IBM Mainframe, COBOL, CICS. 
and VSAM.. Reqs. Bachelor's or 
foreign equivalent in Computer 
Science, Computer Engineering 
9r Mathematics. Will accept 
three years of college education 
and three years of related 
experience in lieu of required 
education and experience. Plus 
2 years in the job offered or 2 
years in a related occupation 
including Programming or 
Software Engineer. Related 
experience must include writing 
batch files and use of IBM 
COBOL, CICS, and VSAM. $61 
921.80/year, 40 hrs/wk, 9:00AM 
5:00PM.Applicants must show 
proof of legal authority to work in 
the US. Respond by resume to 
tiinois Department of Employment 
Security, 401 South State St.- 7 
North, Chicago, IL 60605 
Attention: Shella Lindsey, Ref. # 
V-IL 24988-L “an employer paid 
ad". No calls — send 2 copies of 
both resume & cover letter 


Software Engineer. Sought by 
Englewood Colorado consulting 
company to work in various 
unanticipated locations through 
out the U.S. To work in various 
unanticipated locations through: 
out the U.S. Research, design 
and develop computer software 
systems in conjunction with 
hardware product development 
Analyze software requirements 
to determine feasibility of design 
within time and cost constraints. 
Consult with clients to define 
needs or problems. Use of Power 
Builder, Sybase, J BUILDER 
JAVA, SERVLETS and HTML 

Reqs Masters Computer 
Science, Computer Engineering 
or Electronics Engineering or 
related field of study. Pius 3 years 
in the job offered or 3 years in a 
related occupation including 
Programmer Analyst. Will accept 
a Bachelor's degree and five 
years of progressive experience 
in the field in lieu of required 
education and experien 

$72,000/year, 40/hrs/wk, 8AM 
5PM. Respond by resume 
to James Shimada, Colorado 
Department of Labor & Employ 
ment, Tower Ii, #400, 1515 Ara 
pahoe St., Denver, CO 80202 
and refer to Job Order No 

18068CO 4647489 


Software Engineer. Sought by 
Denver Colorado consulting 
company to work in various 
unanticipated locations through- 
out the U.S. Research, design 
and develop computer software 
systems in conjunction with 
hardware product development 
Analyze software requirements 
to determine feasibility of design 
within time and cost constraints 
Consult with clients to define 
needs or problems. Use of IBM 
3090, COBOL, NATURAL 
ADABAS, DB2, FileAid, TSO. 
ISPF, ACCESS and IOF. Regs. 
Masters or foreign equivalent in 
Computer Science, Computer 
Engineering, Electrical or Elec- 
tronics Engineering or Physics 
or related field of study. Plus 
2 years in the job offered 
$75,000/year, 40/hrs/wk, 8AM 
5PM. Respond by resume to 
James Shimada, Colorado 
Department of Labor & Employ- 
ment, Tower Il, #400, 1515 
Arapahoe St Denver, CO 
80202 and refer to Job Order No. 
JL1118067 


SOFTWARE QUALITY 
ASSURANCE ENGINEER 
PROGRAMMER 


Test client/server applications 
using object oriented methodol- 
ogy, GUI tools, SQA, VB, Access 
2000, ActiveX, ADO and Unix 
implement test plans, cases. 
scripts. Perform black and white 
box testing; installation and load 
testing 


BS degree in computer science. 


engineering discipline. 2 years 
experience 


Send resume to: Factor, a Division 
of WR Hess Company, Attention: 
Lana Morgan, PO Drawer G 
Chickasha, OK 73023 
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F WorK Is 
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LUCKILY, WE 
ARE Too! 


date opportunities 


| For the most up to 
| 


and coverage, stay 


tuned in with us. 


ITCAREERS 
where the hest get better 


1-800-762-2977 
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1OR SOFTWARE ENG 
NEER tt Jesigr Jevelor 
rt applicatior 
lecommunica industry 
lient/server vironment 
bject Oriented method 
og C Perl, CORBA 
TCP/IP, Rogue W CmMvC 
Harvest, Rational Rose, Workshor 
tify 1 purify under SUN 
5 95 

s. Require 
Computer Science 
}, Mathematics 
related field w 

years of experience 
as a Programmer 
Salary: $93,000 per 
am to 5:00 pm, M-F 
Roz L. Alford 


year, 8:0( 
Send resume t 
Principal, ASAP 
3885 Holcomb ige J 
Norcross, GA 30092; Attn: Jot 
PK 


SOFTWARE QUALITY ANALYST 
to analyze, design 
4e-bug, implement ar 


software manufactur 


dications related t 


ot 


rogrammer/Analyst. ¢ 


ffered. Apply by 

1 Phyllis Scott, HR 

Director, MAPICS, Inc., 1000 
Windward Concourse 

1000, Alpharetta, GA 30005 


Attn: Job BM 


VEGA is currently staffing for 
long term, stimulating consult 


projects througt 


ut the 

We are hiring professionals with 
any of the following skills 
AS/400 

COBOL/DB2 


Oracle/SQL S 
Java/HTML 


Power Builder 


phone 800-810-8342 


www. vegaconsulting.com 


It’s Fast. 
It’s Huge. 
It Crosses 
Worlds 
& 


Dimensions. 


IT CAREERS 


EES 


TKPROFF. Re 
. ink 


ATM, TIVE! 

frame relay and LAN tech 
QOS tect 
toc Ss 

and SNMP protoc 

Vxworks and associate 
pment tools. Requires a 
Mathematics, C 


related field 


as v 
Ypportunities for b 


and experienced Progr 


DBA's ar 


with any of the f 


*informix 

SQL or SOL § 

“GU! *DB2, CIC 

“Visual Basic *OC 

C, C++ or Visual C++ 

r Sybase 

cess or PowerBu 

“CORBA “WinNT 

*SAP HR/SD/FI-CO/Basis/ABAP 

‘Java, EJB, Weblogic 


Bach rs 
require tepen 
We also accept 
equ. of the d 
equ. in edu 
benefits 

me and salary r 
to: Attn ¢ Solutions Inter- 
nationa » Attn: HR 6169 
Cyril Avenue, Orlando, FL 
32809. Visit our website at 
www.cyberailied.com 


fessionals 


¢ Information Technology 
als 
Analysts 

* Computer Programmers 
* Software Engineers 

mmediate consideration 
please forward your resume and 
salary requirements to: Entergy 
Corporation and operating 
subsidiaries, Attn: Ms. Lori 
Hendler, HR Department, PO 
Box 61000 New Orleans, LA 
70161. Phone: 504-576-4117 
EOE/M/F/D/V Principals only. 
You will only be contacted if you 
are considered for an interview 


CREEK 
RESOURCES 
CORPORATION 


specializes in providing 
top quality Computer 
Professionais to cutting 
edge companies across 
the world 


We have openings for 
* PowerBuilder 
* C++ Developers 


* Oracle or Sybase 
DBAs 


¢ ERP Systems/ 
Software 


Please e-mail your 
resume to 


Monroe Guest 
mguest@creekresources.com 
(918) 865-8274 voice 
(918) 865-2697 fax 


Developn 
Manager 


vare deve’ 
management. A 
jal and tech 


upper 
and solve co 
nical problems c 
development. Provide technical 

idance and leadership tc Ui 

sified personals. M 

Computer Science, Mathematics 
or MIS. Two year 

search and 

testing and d 

Knowledge or train 
software/internet d 
languages and tools Using 
C++, Java, HTML, ASP, Vist 
Studio, MS Office on Windo' 
98, Windows NT, and Unix o 
ating systems. Full time position 

st have proof of legal authority 

ork in the | Send resume 

to: Patient Education Institute 
100 Oakdale Campus Oakdale. 
1A 52319 


10 software 


ony Corporation, head 
tered in Madison, WI h 

made it a corporate goal to 
attract and retain the best IT 
professionals such as 
© Software Engineers 
* Programmer Analysts 
* Project Managers 
* Quality Assurance Technicians 
if you are looking for a stable. 
flexible and challenging career in 
e-business or software develop: 
ment areas please send your 
resume to Symphony HR Dept 
at 608-294-9321 or email to 
info@ symphony.cc 


r. Applicants 
gal authority 
id 2 copies 


ter to Illinois 


tated duties gained 
ugh academic ¢ ursework 
previous work experience. C 
petitive salary offered. Appt 

N Ware, HR 
Manager, iMedeon, inc., 11605 
Haynes Bridge Rd., Suite 600 
Alpharetta, GA 30004; Attn: Job 
SM 


resume t 


nterr 


lied Ct 


nd serv 


prises and ce 


€ 


Jes keeping up 


slease schedules 


activities 
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paid holidays 


ment and 


nity employer 


has been ar 


ion, national 


andicap, or any 


status. Send, e-ma 


to: National Recr 
ger, HALO Branded 
5 ) W. Tc 
Niles, IL 60714 
halo.com) Fax: 847-600-4 


ail or 


397 


Je CWASDBA 


orrespondence. 


nalysts 

tants 

nagers 
pase Analysts 


Must be willing to travel 
relocate as required. 


Please forward resumes 
pquick @cmsna.com 
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Engineering 


SOFTWARE ENGINEER 

Provide functional and empirical analysis 
relating to the design, development, 
implementation, testing, and documentation 
of software for the organization's products 
and manufacturing system. Participate in the 
development of test strategies, devices, 
and systems 


BS in Computer Engineering or technical 
equivalent is required, as well as 3+ years of 


experience with C/C++ 


CLINICAL/COMPUTER ENGINEER 
Provide technical and clinical phone support 
to customers regarding the proper use of 
the equipment and resolve technical 
software or hardware problems for highly 
sophisticated diagnostic equipment 
Respond to inquiries from hospital 
technicians using the equipment on a daily 
basis and to technical inquiries from Field 
Service Engineers who encounter technical 
issues in installing, testing and servicing 
this equipment. 


BS in Computer Science, Biomedical 
Engineering or Technical equivalent is 
required. Excellent troubleshooting and 
communication skills are required, as well as 
knowledge of clinical cardiology. 


What we offer: At GE Medical Systems 
Information Technologies, Inc. you'll enjoy 
the rewards of a competitive salary, an 
outstanding benefits package and the 
professional advantages of an environment 
that supports your development and 
recognizes your achievements. 


How To Apply: Please send your resume 
to: GE Medical Systems Information 
Technologies, Inc.,Attn: HR, 200 Porter 
Drive, #210, San Ramon, CA 94583 or 
fax to: (925) 838-0494. EOE/M/F/V/D 


GE Medical Systems 
information Technologies, Inc. 


Software Engineer V ENGINEERING 
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Palm Desert, California 
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» * 
Want to learn the 
hottest techniques 

in Technical Recruiting 
& Retention today? 

Connect with experts 
and peers in Palm 

Desert, California, at 
CR Cunt 

Technical Recruiting & 

Retention Conference, 
June 3-6, 2001 at 
Fla dle} aa-m Blt 


Springs Resort & Spa. 


ar Now 
serve Your Place! 


SESSION HIGHLIGHTS 


Xtreme Recruiting: 
How We Got Here and Where 


We Go from Here 
MICHAEL MCNEIL, PURE CARBON 


Critical ‘rectuiting lessons for a critical time in recruiting. M ichael 
McNeil, the former head of Cisco staffing and founder of Pure 
Carbon, a unique e-recruitment solutions company, is considered 
by many as one of the leading visionaries in the employment space 


Automated Screening: 

Guaranteed Success or Formula 

for Failure? 

DR. WENDALL WILLIAMS, SCIENTIFIC SELECTION 

Are you really measuring what you want? What does it take to do 
it right? Dr. Wendell Williams, Managing Director of Scientific 


Selection is a nationally recognized expert in testing and assess- 
ment for selection. He is a frequent contributor to online and print 





recruitment newsletters and professional publications 


Measuring Your Success: 
What Your Management Really 


Wants to Know 
KEVIN WHEELER, GLOBAL LEARNING RESOURCES, INC 


The critical value of metrics is in the eye » of the beholder. Do you 
know who your stakeholders are? 


Kevin Wheeler, the President and Founder of Global Learning 
Resources, Inc., is a globally-known speaker, author, columnist, 
and consultant in human capital acquisition and development 


Managing the Hiring Manager 
KEN GAFFEY, STAFFING CONSULTANT 


What you can do to plan, prepare and promote critical relation- 
ships in the hiring process 

Ken Gaffey is a staffing consultant with over 15 years of Human 
Resources experience in the New England high technology and 
financial services marketplace. Ken is an active member of 
IHRCA, NEHRA, SHRM, HRC, the Society of Professional 
Consultants, and the Human Resources Council. Ken contributes 
articles and book reviews to the Electronic Recruiting Exchange, 
Monster, HR Today, and several other professional organization 
newsletters and periodicals. 


Building World Class College Relations 


Programs 
JULIE CUNNINGHAM, TELLABS, INC. 





if your competitors succeed in hiring 23% more college students 
this year, will there be any left for you? 


Julie Cunningham, Manager, Global College Relations, Tellabs, 
Inc. Julie is a former board member of the National Association of 
Colleges and Employers. She speaks frequently on the programs 
and practices that have made Tellabs one of the premier bench- 
marks for college hiring. 
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Diversity - What You Need to Do to Tap 


“All” the Top Talent 
PRESTON EDWARDS, IMDIVERSITY.COM 


p employers benchmark how diversity has become a core value 
) attracting and retaining top talent and keeping a competitive 
edge. Moderator, Preston Edwards, Chairman and CEO, 
|MDiversity.com, and Black Collegian Magazine, is nationally 
known for his 30 year commitment to diversity education. He has 
been honored by numerous organizations including the 1999 
Pericles Award from the Employment Management Association 


What You Really Need to Know About 
Resume Management Systems or, How to 


Tell “Real Ware” from “Vaporware” 
MARK MEHLER, MMC GROUP 





The worlds most competitive corporations discuss the j pros and cons 

of choosing and using emerging technology tools and systems. 
Moderator: Mark Mehler, President, MMC Group. Mark is an internation- 
al consultant on high-volume staffing processes, a sought after speaker 
at national recruiting conferences and co-author of CareerXroads. 


Town Hall Forum: 

Pundits, Puns and Pulled Punches 

GERRY CRISPIN, CAREERXROADS 2000; JOHN SULLIVAN, 
AGILENT TECHNOLOGIES; KEVIN WHEELER, GLOBAL 
LEARNING RESOURCES; PETER WEDDLE, WEDDLE'S 


Four internet recruiting pundits square off in a “no-holds” barred 
debate on the future of employment. Who are the winners and 
losers in the employment space? 


Internet Recruiting Strategies - 


TOOLS Overview: 
BRET HOLLANDER, NETRECRUITER 


Advanced s sourcing strategi es & techniques demonstrated from an 
actual day of recruiting by one of the best firms in the U.S. on sourc- 
ing any type of candidate. Witness actual software, as well as unique 
scripts and techniques to successfully develop relationships with 
potential candidates. TOOLS is intended for recruiters or sourcing 
specialists who have already mastered basic sourcing techniques 
through the use of fee-based sites, formula searching on engines 
such as AltaVista or Google, and have taken an existing all-day class 
on this topic by any of the top Internet recruiting training firms. 

© Capture Tools 

© Processing Tools 

® Communication Tools 

. 

. 





Security Tools 
Learning Tools 


Technology 2001 
SUSAN HODGES, SEMCO 


There is always something new going on in IT, but the new millen- 
nium seems even busier than usual. The internet is affecting every- 
thing that’s being done and new products and skills appear daily. 
This session will look at the new technology in each critical area - 
platforms, development, data, communications and applications. 
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Computerworld’s 
aaetom le 

6 Ker te(See lee 
technologists who 
understand busi- 
ness needs, take 
calculated risks 
and lead through 
innovation. They 
are vice presidents 
of IT, CIOs, IS 
directors and 

evURS teenie re ental gs 
honored as 
Computerworld’s 
Premier 100 from 
PRaeCcr ae lennkeya 
vertical industries. 
When you attend 
this unique confer- 
ence, you'll hear 
proven examples 
of how these IT 
Leaders have 
advanced their 
organizations 
through innovative 
leadership. 
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iF) 


ryfran Johnson 
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oie uoeles 





12:00 - 5:00pm 

GOLF TOURNAMENT FOR 
PRE-REGISTERED ATTENDEES 
7:00 - 8:30pm 
PRE-CONFERENCE EVENING 
NETWORKING RECEPTION 


7: 00am - 8: 00am 
BUFFET BREAKFAST 


8:00am 


WELCOME & 
OPENING 
\ REMARKS 
h Alan Guibord, CEO, 


Computerworld 
Maryfran Johnson, 
Editor-in-Chief, 
Computerworld 


8:15am 
OPENING KEYNOT 

As GOING DIGITAL THE 
OLD-FASHIONED WAY: 
GM's LI L-HEADED 
APPROACH TO E-BUSINESS 
Ralph Szygenda, CIO, 
General Motors 

9:00am 

PANEL 1: 

IT’S MISSION IMPOSSIBL 

GLOBALIZATION AND E-BUSINESS 

Panel Moderator: Sarwar Kashmiri, 

CEO, EbizChronicles.com 

Ready or not, the Web is making the global- 

ization of business a reality. But pursuing a 


global strategy means more for IT than creat- 


ing a worldwide network infrastructure, 
ting up foreign distribution or hiring IT tal- 
ent abroad. So how does an IT Leader go 
about gettin p a grip on strategy to support: 


tional experience to send you off with a host 
of good ideas along with an action-item list. 


10:00am 
BREAK 


10:15am 
OLD RULES, NEW GAME: 
@ § BUILDING PRUDE 
GLOBAL E 
i Irene Dec, 
VP International Investments, 
Prudential Insurance 


Y UR CUSTOMER re HANNE LS 
Panel moderator: Kevin Fogarty, 
Business & Technology Editor, 
Computerworld 


The customer economy has arrived with a 
vengeance, trailing massive numbers of Cus 
tomer Relationship Management (CRM) sys- 
tems in its wake. But integrating disparate 
CRM applications and re-archit ng work 
flow to get that mythical 360-degree view of 
the customer remains a major hurdle for IT 
Are you tying all of your customer channels 
together — in realtime — to leverage existing 
investments in front-office and legacy appli- 
cations? This panel will bring together di- 
verse industry views on a topic that ultimate 
ly affects every company’s bottom line. 


12:00pm 
INTERACTIVE LUNCH: 
RECRUITING & RETAINING 
Top TALENT 
1:30pm 
AFTERNOON KEYNOTE: 
f SURVIVING THE 
REVOLUTION AND 
‘THRIVING IN THE 
CUSTOMER ECONOMY 
Patricia Seybold, CEO, 
Patricia Seybold Group 
and Author of 
“Customers.com” and 
The Customer Revolution” 


je 1Spm 


r 


ZLESS WARRIORS AND THE 
CHALLENGE OF M-COMMERCE 
Panel moderator: Bob Brewin, 
Senior Editor, Wireless Technology, 
Computerworld 


Few technologies hold as much promise — or 
pose as many perils — as wireless networks 
and mobile computing. What are the best 
practices in deploying mobile commerce ap- 
plications that resolve security concerns an 
location-serv controversies? Which appli- 
cations make the most sense for wireless 
LANs? How do you choose an architecture 
that works well for your user base? How sol- 
id is the Wireless Application Protocol 
(WAP) standard for unifying handheld de- 
vices and wireless networks? Our panelists 
will examine these core questions through 
the lens of their own experience, coming up 
with some practical recommendations for 
the next wave of wireless warriors. 


3:00pm 
BREAK 


WESTIN MISSION HILLS RESORT 


71333 Dinah Shore Drive 
Rancho Mirage, California 92270 
1-888-625-51- 


Register today for Computerworld’s 
Premier 100 IT Leaders Conference 
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3:10pm 
CLOSING KEYNOTE: 
THE ABILITY TO RISK 
INNOVATIONS 
Chet Huber, President, OnStar 
3:55pm 
CLOSING REMARKS 


4:00pm - 5:30pm 
SPONSOR BREAKOUT SESSIONS 
5:30pm - 8:30pm 
COCKTAIL/NETWORKING 
REC ON 

EXPO & BUFFET DINNER 


7:00am - 8:00am 
BUFFET BREAKFAST 
8:00am 

OPENING REMARKS 

Alan Guibord & Maryfran Johnson 


8:15am 

OPENING KEYNOTE: 
IT LEADERSHIP IN A 
CHANGING ECONOMY 
; Doug Busch, CIO, Intel 


9:00am 

PANEL 4: 

THE HEAVY HA 

SAM IN ONLINE SECURITY 4 
PRIVACY PROTECTION 

Panel Moderator: Alan Paller, 
Research Director, SANS Institute 


s 


Whe r technology touches its citizens 
these d. the U.S. government seems to be 
there with new regulations or proposed leg- 
islation. The high-tech sector remains split 
about how to approach online privac 

antees in the U.S., while the European 

has already adopted tough data protection 
laws that multinational companies must fol- 
low. Our expert panel will talk about strate- 
gies for keeping a step ahead of Uncle Sam in 
this uncertain, potentially explosive, regula 
tory environment. 


10:00am 
BREAK 


10:15am 
PRIVACY - IT’S NOT JUST 
A COMPLIANCE ISSUE 
Eddie Schwartz, 
VP of Strategy, Guardent 
(former Chief Security Officer, 
Nationwide) 


11:00am 

TTOWN HALL MEETING: 
“ASK THE CAREER EXPERTS” 
Maryfran Johnson 


12:00pm 
© & BUFFET LUNCHEON 


RNOON 
KEYNOTE: THE 
BEST OF BOTH 
WORLDS: THE 
SYNERG BETWEEN 
OPERATIONS 
AND IT 
Laura Olle and 
Marge Connelly, 
Co-CIOs, Capital 
One Financial 


2:15pm 
PANEL 5: 
THE NEW ROE TRACKING 
TECHNOLOGY PAYBACK IN A 
TOUGH ECONOMY 
Panel Moderator: Julia King, 
Executive Editor, ComputerworldROI 
Now is the time to recession-proof your IT 
organization, generate some new ideas and 
find new revenue streams. How is your com- 
pany using the Internet to streamline 
processes within the organization and deal 
more effectively with your supply chain? Are 
you creating online relationships with part- 

rs and competitors alike? Where c: 

T to create new products and 

etting focused on the real business oppor- 
tunities and the ROI behind technology ex- 
penditures is the mission of this panel. 


3:15pm 
BREAK 


3:25pm 
CLOSING KEYNOTE: 
ESSENTIAL INGREDIENTS 
FOR B2B MARKETPLACE 
LIQUIDITY 
Harvey Seegers, 
President/CEO, 
GE Global eXchange Services 
3:55pm 
CLOSING REMARKS 
Alan Guibord & Maryfran Johnson 
4:00 - 5:30pm 
SPONSORED BREAKOUT SESSIONS 
7:COpm 
COCKTAIL RECEPTION, 
ENTERTAINMENT AND GALA 
AWARDS DINNER 
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Outsourcing 
Hits NY. 


IT executives say high regional costs, 


mergers drive decisions to outsource | 


BY JULEKHA DASH 

OSPITALS IN the 

New York area 

are seeing an un- 

usually high 

number of IT 

outsourcing deals, due to a 

spate of recent mergers plus 

the high cost of providing care 
in the area. 

“Being in New York makes it 


very difficult to retain technol- | 


we're 


” 


ogy people, because 
competing with Wall Street, 
said Richard P. McGrail, vice 
president and CIO at Continu- 
um Health Partners Inc., which 
operates seven facilities in 
Manhattan and Brooklyn. Con- 
tinuum announced in January 
that it signed a seven-year, 


Continued from page 1 


HIPAA 


HHS “will consider any neces- 
sary modifications” after the 
regulations take effect, which 
was scheduled for Saturday 
(after Computerworld’s press 
deadline). 

“We were a little surprised 
and a little disappointed, but 
this is not over yet,” said Dr. 
John D. Clough, director of 
health affairs at the Cleveland 
Clinic Foundation. 

The HIPAA rules will affect 
“virtually every data element 
that a plan might use,” said 
Robert Heird, senior vice pres- 
ident at Anthem Blue Cross/ 
Blue Shield in Indianapolis. 
“It’s going to have a material 
affect on all our systems.” 

But Joe Coyle, director of 
technical architecture at PHS 
Health Plans in Shelton, Conn., 
said the regulations will pro- 
vide direction to health care IT 
departments about how to 
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$350 million deal with Paris- 
based Cap Gemini Ernst & 
Young. 

Another problem, said Matt 
Duncan, a research director at 
Gartner Inc. in Stamford, 


Conn., is that “hospital organi- | 


zations are loathe to disrupt 
their salary structure.” 


tals “can’t pay Windows 2000 
engineers twice what they pay 
” he said. 


a nurse, 
Earlier this month, Saint 


Vincent Catholic Medical Cen- | 


ters in New York outsourced 
its IT department to Computer 
Sciences Corp. (CSC) in El Se- 
gundo, Calif., in a seven-year, 
$200 million deal. 

After merging with other 


Patient 
Privacy 


The HIPAA privacy rules: 

= Prohibit health care providers from re- 
leasing most information about individual 
patients without obtaining consent 

w Apply to written, oral and electronic com- 
munications 

= Grant patients the right to see a copy of 
their records and be notified about how 

pr fi 

#8 Allow for civil fines of $100 per violation, 
up to a total of $25,000 per year, or crimi- 
nal penalties of as much as $250,000 and 
10 years in prison for persons selling health 
information 


handle medical data privacy. 
Despite Thompson’s move, 
the battle over privacy rules 
may be far from over. Thomp- 
son said HHS is reviewing the 
more than 24,000 written com- 
ments it received about the is- 
sue during a public comment 
period that ended March 30. 
And since companies have two 
years to comply with the rules, 


Be- | 
cause of nursing unions, hospi- 


~ NEWS 


Wave 
Hospitals 


health systems, it becomes 
complex to “operate as one en- 
terprise,” said Bernadette King- 
ham, a spokeswoman for Saint 
Vincent, which was formed in 
August as a result of a merger 
of three hospital systems. 
Outsourcing allowed Saint 
Vincent to quickly implement 
technologies, such as online 
medical records 


Brooklyn, Queens, Manhattan 

and Staten Island. 

| Within the past year, hospi- 

| der pressure from the federal 
government, corporations and 

consumers to deploy new tech- 

nologies. 

For instance, regulations af- 
fecting the privacy of health 
data, which were scheduled to 
| take effect Saturday (after 
Computerworld’s press dead- 





| there’s still time for alterations. 

The privacy regulations 
| have been criticized by many 

health care industry officials 
and top Republican legislators. 
Some members of Congress 
had asked the Bush adminis- 
tration to delay the implemen- 
tation again (after being de- 
layed first in February) or to 
reject them as unworkable. 

After Thompson decided 
against another delay in imple- 
menting the regulations, the 
American Hospital Associa- 
tion (AHA) said in a statement 
that “without critical changes 
... these rules could create a 
bureaucratic nightmare, get- 
ting in the way of timely and 
effective patient care.” 

The privacy regulations will 
cost hospitals as much as $22.5 
billion during the next five 
years, according to the Wash- 
ington-based AHA. A separate 
study conducted by the Blue 
Cross/Blue Shield Association 
estimated that individual hos- 
pitals will incur costs of be- 
tween $775,000 and $6 million 





and e-com- | 
merce applications, uniformly | 
across its eight hospitals in | 


tals nationwide have been un- | 





line), will require a major over- 


haul of many hospitals’ sys- 

tems (see story below). 
Additionally, The Leapfrog 

Group, a Washington-based 


consortium of about 60 major 
companies, is pushing hospitals | 
to use computer physician or- | 
der entry systems to cut med- | 


ical errors [Page One, Feb. 12]. 


When New York Presbyter- 


ian Hospital decided to out- 
source its IT department to 
First Consulting Group Inc. in 


Long Beach, Calif., in Novem- | 


ber 1999, that “set a new 
threshold in the IT world” for 
hospitals, said Ann Sullivan, 


| CIO of Maimonides Medical 


Center in Brooklyn. 
Following that 
event, Maimonides 


n’t considering the same op- 
tion, she said. But the medical 
center decided not to out- 


source its IT systems because | 
it didn’t want to hand over | 
such a strategic function as IT | 


to a third party. 
Instead, Maimonides 


ment into a for-profit applica- 
tion service provider. D 


to pay for some aspects of 


complying with the rules. 
Thompson’s decision to let 
the rules take effect was ap- 


plauded by the Chicago-based | 
| arm of the federal Centers for 
| Disease Control and Preven- 
| tion in Atlanta, which advises 
| HHS on policy issues. 


Healthcare Information and 
Management Systems Society, 
which last week urged him not 
to delay them again. 


“Confidence needs to be in- | 


stilled in the American public 
that its [health information] is 
secure and private,” said 
Stephen Lieber, president and 


health care IT group. 


Lieber added that the rules | 


aren’t perfect and that modifi- 
cations need to be made, such 
as including a provision that 


would let the federal regula- | 
tions take legal precedence | 
| [HHS officials] intend to make 
with medical data privacy. But | 


over existing state laws dealing 


unlike the financial services 


industry, health care currently | 


lacks a uniform set of privacy 
standards, he said. 

The privacy requirements 
“could have been much better,” 


| acknowledged Dr. Mark Roth- 
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“landmark” | 
officials | 
knew its own medical board | 
would begin asking why it was- | 


this | 
month turned its IT depart- | 


| er. The advisory 
| will likely hold a series of hear- 
CEO of the 12,000-member | 
| whether 


Recent health care IT 
outsourcing agreements 
in New York: 


Hospital: Saint Vincent 
Catholic Medical Centers 
Vendor: CSC 

Size and date of deal: Seven- 
year, $200M deal in April 


Hospital: Continuum Health 
Partners Inc. 


Vendor: Cap Gemini Ernst & 
Young 


Size and date of deal: Seven- 
year, $350M deal in January 


Hospital: North Shore Long 
Island Jewish Health System 


Vendor: Perot Systems Corp. 
Size and date of deal: Seven- 
year, $150M deal in August 
2000 


Hospital: New York 
Presbyterian Hospital 
Vendor: First Consulting 
Group 


Size and date of deal: Seven- 
year, $228M deal in Novem- 
ber 1999 


stein, chairman of the privacy 


| and confidentiality subcom- 
| mittee of the National Com- 


mittee on Vital and Health Sta- 
tistics. The committee is an 


But, Rothstein said, the pri- 
vacy rules are “long overdue” 
and can always be changed lat- 
committee 


ings around the country to see 
modifications are 
needed, he added. 


One pro-HIPAA privacy 


group said it was pleased by 
| Thompson's decision but wary 


of what lies ahead. 
“It’s our understanding that 


some major revisions,” said Joy 
Pritts, senior counsel at the 
Health Privacy Project of the In- 
stitute for Health Care Research 
and Policy at Georgetown Uni- 
versity in Washington. “So we 
intend to keep a very close eye 
on what goes on.” D 
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Nerds Betrayed 


ETRAYED — THAT’S THE WORD to describe the IT peo- 
ple at Xerox. When some users violated company policy 
and installed Microsoft Windows XP beta software on 


their PCs, the result was what Xerox called an 


“isolated 


network outage.” And then it happened again. And again. 
All in less than a week, and all at the same Xerox site in El Segundo, 
Calif. It got so bad that Xerox warned all 50,000 of its U.S. employ- 
ees not to install XP betas without permission or they’d face disci- 


plinary action. (See story, page 6.) 


What’s worse, it wasn’t ordinary users that brought down the net- 


work. It was nerds. 

Somehow, we expect ordinary users to foul 
things up. They do stupid things, or unexpected 
things, or things that our systems were never 
designed for. They don’t know the limits of the 
technology, or they don’t accept those limits. 
They expect everything to work no matter how 
badly they abuse or misuse it. 

But the Xerox engineers who smuggled in XP 
betas weren’t naive users. They 
were our guys. OK, not IT-shop 
people, but IT-savvy engineers 
who develop products that use 
microprocessors and connect to 
networks. 

If anyone should have known 
better, it’s these folks. And 
they’re the ones who brought 
things down. 

Then again, maybe that’s what 
we should expect. After all, regu- 
lar users aren’t going to futz with 
this stuff. Shirley in accounting 
just wants a browser plug-in to 
open a digital birthday card from 
her grandson. Phil in sales may 
be a little more dangerous — he 
wants to connect his Palm hand- 
held to his PC — but it’s still 
nothing earthshaking. A new op- 
erating system? That’s out of 
their league. 

But our feilow nerds? That’s 
another story. Engineers and oth- 
er power users love playing with 
technology as much as we do. 
Betas, freeware, shareware, 
promoware — if it’s neat stuff, 
they’ve gotta have it. And they 
won't wait for us hidebound fud- 
dy-duddies in IT to make sure it’s safe. 

These people are our most tech-savvy users. 
They should be the IT shop’s closest allies. In- 
stead, that lust for the latest and greatest means 
that no matter what the rules say, they’ll keep 
sneaking in unauthorized software. And when 


They'll keep 
sneaking in 
unauthorized 
software — 
no matter 
what. 


something goes wrong, we'll be betrayed again. 

So, what to do? We’ve got a pretty good idea 
who the likely rule-breakers are. But just en- 
forcing the rules won’t work. We can’t catch all 
cheaters; we'll spot them only when something 
major goes wrong. And the time and effort it 
takes to try will never be worth the trouble. 

Besides, as soon as we're not looking, they'll 
be back at it again. They'll just be 
more careful to cover their tracks 
next time. 

But there’s another way. If you 
can’t beat ’em, co-opt ’em. 

Are there unauthorized Win- 
dows XP beta testers on your net- 
works? Make them authorized 
beta testers. Create a program. 
Sign ’em up. That way, they’re not 
breaking the rules. 

More important, you can keep 
a close watch on them. And when 
something goes wrong, they’ll co- 
operate in trying to clear it up in- 
stead of trying to hide it. 

And, yeah, you'll get some very 
useful real-world feedback on 
what XP — or any other beta 
product — is really like for users. 
You won't get that perspective 
from your IT-shop testers. 

But mainly, you'll be able to 
keep the surprises to a minimum. 
And herding these users through 
early beta tests may be a chal- 
lenge, but it’s better than having 
to wonder which one will crash 
the network next. 

So keep those rule-breaking 
nerds close, and the closer the 
better. Either that, or be ready to be betrayed — 
again and again and again. B 





Hayes, Computerworld’s senior news columnist, has 
covered IT for more than 20 years. Contact him at 
frank_hayes@computerworld.com. 


PILOT FISH IS TESTING the 
new phone switch at the main 
office the old-fashioned way: 
one number at a time. But he’s 
getting tired of the same conver- 
sation over and over. Fish: “Hi, 


| this is Fred. I'm testing your new 


phone number.” User: “Did it 
work?” 


UNCLEAR ON THE CONCEPT 


| University IT staff is implement- 
| ing PeopleSoft financials, and 


there are delays. Among other 
problems, the staff doesn’t have 
the right version of a compiler to 
build the code for its Unix 
servers. At a big status meeting, 
one manager has a suggestion: 
“We could fast-track the project 
by using the compiler we do 
have: the NT version.” 


RECORDS CLERK calls help 
desk after she accidentally 
deletes a file. “We can try to re- 
store it from last night's backup 
tape,” pilot fish offers. “What if | 
only created it today?” she asks. 
“In that case, we can't help you,” 
says fish. Pause. Then she asks, 
“Would it be on tomorrow night's 
backup tape?” 
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FROM THE INSTRUCTIONS 
for one company's two-page ex- 
pense report form: “This form 
was developed to encourage all 
users to become paperless.” 


SUPPORT PILOT FISH, trying 
to troubleshoot a nonworking 
printer, asks the user if she’s 
running it under Windows. “No, 
my desk is next to the door,” she 
replies. “But that’s a good point. 
The man sitting in the cubicle 
next to me is under a window, 
and his printer is working fine.” 


NEW ENGINEER at manufac- 
turing company assures network 
admin pilot fish that he’s worked 
with desktop computers before 
- 10 years ago, in fact. Fish 
doesn't doubt it when he gets an 
e-mail message from the new 
hire: “Can you supply me 15 flop- 
pies because | need to back up 
files on my PC?” 


Bring me up to date: sharky@ 
computerworld.com. You get 
a sharp Shark shirt if your true 
tale of IT life sees print - or if it 
shows up in the daily feed at 
computerworld.com/sharky. 
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“We can monitor ovr entive operation from 
one centyal location. We know what the ‘Wax 
Lips people ave doing; we know what the 
Cushion’ people are er know what the ‘Fly- 


an-the-Ice Cube'people are doing. But we don't 
Know what the ‘ Dati mit oie ore Sows 
We don't want to know what the‘ Plastic 


Vornat’ people are doing.” 
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data. And, now, a boatload of e-commerce data. 
What you don’t have is a reliable way to quickly 
Perales mate re mC adie iim lS 
Fortunately, we do. SAS" Intelligent Warehousing 
Solutions enable you to integrate nei sole mere once 


pany’s data, regardless of its source or platform. 


Then mine the data to reveal previously unknown 


patterns in customer behavior, employee produc- 
TINA LOIN Im Cari ome sce della cet) 
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business performance. To learn more about how 
CRCHTIM ol COURT CTR me eatin ice nTel 
give you the confidence to act on them— call us 


up at 1-800-727-0025. Or stop by www.sas.com. 


The Power to Know. @ Sey 


» e-Intelligence 


IBM E-BUSINESS HOSTING™ CAN HELP YOU BECOME A FORMIDABLE FORCE ON 
THE WEB. GQUR RAPIDLY SCALABLE AND REDUNDANT NETWORKS ENABLE YOUR 
E-BUSINESS TO GROW - AND GROW FAST — WITHOUT INTERRUPTION. AND WE 
HAVE THE EXPERIENCE OF HOSTING SOME OF THE MOST HEAVILY TRAFFICKED 
E-BUSINESSES IN THE WORLD, INCLUDING VICTORIASSECRET.COM. E-BUSINESS 
HOSTING. ONLY FROM IBM. 


Call 1 800 IBM 7080, ask for host or visit ibm.com/e-business/hosting 
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